CVE search · CVE-2019-14826
CVE-2019-14826
medium 4.4
A flaw was found in FreeIPA versions 4.5.0 and later. Session cookies were retained in the cache after logout. An attacker could abuse this flaw if they obtain previously valid session cookies and can use this to gain access to the session.
Details
- Status
- Modified
- Published
- Last changed
- Source
- secalert@redhat.com
- Weakness
- CWE-613
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 3.1 | medium 4.4 | CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N |
nvd@nist.govPrimary |
| CVSS 3.0 | medium 5.6 | CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N |
secalert@redhat.comSecondary |
| CVSS 2.0 | low 2.1 | AV:L/AC:L/Au:N/C:P/I:N/A:N |
nvd@nist.govPrimary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
References
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14826Issue TrackingThird Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14826Issue TrackingThird Party Advisory