Approved changes feed: RSS · Atom

cpe:2.3:a:freeipa:freeipa:4.5.0:*:*:*:*:*:*:*

part: a version: 4.5.0 update: *

VendorFreeipa (8e2a7aad-9549-53fe-b447-85394c72c314)
ProductFreeipa (58afe6d3-d495-561a-ba6b-8a63483551af)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/freeipa/freeipa purl2cpe 2026-06-01 10:12:48.483674

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-11191 vulnerable 2026-06-08 05:08:36.989567 Details available
FreeIPA 4.x with API version 2.213 allows a remote authenticated users to bypass intended account-locking restrictions via an unlock action with an old session ID (for the same user account) that had been created for an earlier session. NOTE: Vendor states that issue does not exist in product and does not recognize this report as a valid security concern
Published: 2017-09-27T19:00:00.000Z
Updated: 2024-08-05T17:57:58.066Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.