INFSA-2024:3044: idm:DL1 security update

Information about definition

Identificator: INFSA-2024:3044

Type: security

Release date: 2024-09-06 18:39:36 UTC

Information about package

Red Hat Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.

Vulnerabilities description

  • CVE-2024-1481

    A flaw was found in FreeIPA. This issue may allow a remote attacker to craft a HTTP request with parameters that can be interpreted as command arguments to kinit on the FreeIPA server, which can lead to a denial of service.

Severity level

CVE Score CVSS 2.0 Score CVSS 3.x Score CVSS 4.0
NIST — CVE-2024-1481
no information 5.3 no information
Critical, important, moderate, low

Updated packages