Kanidm Provision
Approved changes feed: RSS · Atom
cpe:2.3:a:oddlama:kanidm-provision:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Oddlama (bd9ee5d2-caab-5950-82f8-4834e0cb8524) |
|---|---|
| Product | Kanidm Provision (34d7d81a-b8ae-523d-914a-5516afd8ab20) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-30205 |
vulnerable | 2026-06-08 07:16:59.290927 |
kanidm-provision leaks provisioned admin credentials into the system log
HIGH (7.6)
kanidim-provision is a helper utility that uses kanidm's API to provision users, groups and oauth2 systems. Prior to version 1.2.0, a faulty function intrumentation in the (optional) kanidm patches provided by kandim-provision will cause the provisioned admin credentials to be leaked to the system log. This only impacts users which both use the provided patches and provision their `admin` or `idm_admin` account credentials this way. No other credentials are affected. Users should recompile kanidm with the newest patchset from tag `v1.2.0` or higher. As a workaround, the user can set the log level `KANIDM_LOG_LEVEL` to any level higher than `info`, for example `warn`.
Published: 2025-03-24T16:47:36.648Z
Updated: 2025-03-24T17:51:17.180Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.