CVE-2024-1481

A flaw was found in FreeIPA. This issue may allow a remote attacker to craft a HTTP request with parameters that can be interpreted as command arguments to kinit on the FreeIPA server, which can lead to a denial of service.
CVSS

No CVSS.

Configurations

No configuration.

History

22 May 2024, 17:16

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2024:3044 -

30 Apr 2024, 14:15

Type Values Removed Values Added
References
  • () https://access.redhat.com/errata/RHSA-2024:2147 -

10 Apr 2024, 21:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-04-10 21:15

Updated : 2024-05-22 17:16


NVD link : CVE-2024-1481

Mitre link : CVE-2024-1481


JSON object : View

Products Affected

No product.

CWE
CWE-20

Improper Input Validation