CVE-2019-14826

MEDIUM

4.4

Description

A flaw was found in FreeIPA versions 4.5.0 and later. Session cookies were retained in the cache after logout. An attacker could abuse this flaw if they obtain previously valid session cookies and can use this to gain access to the session.

CVE Details

CVSS v3.1 Score4.4

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Attack VectorLOCAL

ComplexityLOW

Privileges RequiredHIGH

User InteractionNONE

Published9/17/2019

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

freeipa:freeiparedhat:enterprise_linux

Weaknesses (CWE)

CWE-613CWE-613

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14826(secalert@redhat.com)

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14826(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.