Published: 27/04/2020 Updated: 12/02/2023

CVSS v2 Base Score: 5.4 | Impact Score: 6.9 | Exploitability Score: 4.9

CVSS v3 Base Score: 5.3 | Impact Score: 3.6 | Exploitability Score: 1.6

VMScore: 481

Vector: AV:N/AC:H/Au:N/C:N/I:N/A:C

A flaw was found in all ipa versions 4.x.x up to and including 4.8.0. When sending a very long password (>= 1,000,000 characters) to the server, the password hashing process could exhaust memory and CPU leading to a denial of service and the website becoming unresponsive. The highest threat from this vulnerability is to system availability.

Vulnerable Product	Search on Vulmon	Subscribe to Product
freeipa freeipa
redhat enterprise linux 7.0
redhat enterprise linux 6.0
redhat enterprise linux 8.0

Debian Bug report logs - #966200 CVE-2020-1722 Package: src:freeipa; Maintainer for src:freeipa is Debian FreeIPA Team <pkg-freeipa-devel@alioth-listsdebiannet>; Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Fri, 24 Jul 2020 16:09:04 UTC Severity: important Tags: fixed-upstream, security, upstream Found i ...

Synopsis Moderate: idm:DL1 and idm:client security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for the idm:DL1 and idm:client modules is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a security impact of M ...

Synopsis Moderate: ipa security, bug fix, and enhancement update Type/Severity Security Advisory: Moderate Topic An update for ipa is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CV ...

jQuery before 300 is vulnerable to Cross-site Scripting (XSS) attacks when a cross-domain Ajax request is performed without the dataType option, causing text/javascript responses to be executed (CVE-2015-9251) In Bootstrap 3x before 340 and 4x-beta before 400-beta2, XSS is possible in the data-target attribute, a different vulnerability t ...

CWE-400 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-1722 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=966200 https://nvd.nist.gov https://alas.aws.amazon.com/AL2/ALAS-2020-1519.html

CVE-2020-1722

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

References

Vulmon Search

About

Products

Connect