CVE-2019-14826
CVE-2019-14826
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A flaw was found in FreeIPA versions 4.5.0 and later. Session cookies were retained in the cache after logout. An attacker could abuse this flaw if they obtain previously valid session cookies and can use this to gain access to the session.
CVSS 5.6 · Medium · EPSS 0.3%
- Published
- Updated
Stack: system
Affected products and versions
ipa
- Versions
- FreeIPA versions 4.5.0 and later: Affected
No fix published
freeipa Debian:12
- Versions
- 4.10.1+dfsg1-1+exp1
- 4.10.1-1+exp1
- 4.10.2-1
- 4.10.2-2
- 4.10.2-2+exp1
- 4.11.1-1
- 4.11.1-1+exp1
- 4.11.1-2
- 4.11.1-2+exp1
- 4.11.1-2.1
- 4.12.2-1
- 4.12.2-2
- 4.12.2-3
- 4.12.4-1
- 4.12.4-2
- 4.13.1-1
- 4.9.11-1
- 4.9.11-1+exp1
- 4.9.11-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
freeipa Debian:13
- Versions
- 4.12.4-1
- 4.12.4-2
- 4.13.1-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
freeipa Ubuntu:18.04:LTS
- Versions
- 4.4.4-3ubuntu1
- 4.4.4-4
- 4.7.0~pre1+git20180411-2ubuntu1
- 4.7.0~pre1+git20180411-2ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
freeipa Ubuntu:20.04:LTS
- Versions
- 4.8.1-2ubuntu1
- 4.8.3-1
- 4.8.6-1ubuntu2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
freeipa Ubuntu:22.04:LTS
- Versions
- 4.8.6-1ubuntu6
- 4.8.6-1ubuntu8
- 4.8.6-1ubuntu9
- 4.9.8-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
freeipa Ubuntu:24.04:LTS
- Versions
- 4.10.2-1
- 4.10.2-2
- 4.10.2-2ubuntu3
- 4.11.1-1
- 4.11.1-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
freeipa Ubuntu:25.10
- Versions
- 4.12.2-3
- 4.12.4-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
freeipa Ubuntu:26.10
- Versions
- 4.13.1-1
- 4.13.1-1build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
freeipa Ubuntu:26.04:LTS
- Versions
- 4.12.4-1
- 4.12.4-2
- 4.13.1-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published