CVEvulnerability
CVE-2019-14826
4.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2019-09-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.4 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
- CVSS 3.0 ([email protected])
- 5.6 MEDIUM — CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-613
Description
A flaw was found in FreeIPA versions 4.5.0 and later. Session cookies were retained in the cache after logout. An attacker could abuse this flaw if they obtain previously valid session cookies and can use this to gain access to the session.
Affected configurations
• freeipa freeipa (>= 4.5.0)
• redhat enterprise linux 7.0
• redhat enterprise linux 8.0
Related
Weakness · not in database (1)
References
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14826 Issue Tracking, Third Party Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14826 Issue Tracking, Third Party Advisory