5.3
Medium
CVE-2020-1722 A flaw was found in all ipa versions 4.x.x through 4.8.0
Description
A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (>= 1,000,000 characters) to the server, the password hashing process could exhaust memory and CPU leading to a denial of service and the website becoming unresponsive. The highest threat from this vulnerability is to system availability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ipa | Versions not published |
Other CVEs of ipa
The 5 CVEs of ipa →
CVE-2019-14867
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions…
8.8
High
CVE-2019-10195
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions…
5.7
Medium
CVE-2019-14826
A flaw was found in FreeIPA versions 4.5.0 and later
5.6
Medium
CVE-2017-2590
A vulnerability was found in ipa before 4.4
8.1
High