CVE-2014-7828

FreeIPA 4.0.x before 4.0.5 and 4.1.x before 4.1.1, when 2FA is enabled, allows remote attackers to bypass the password requirement of the two-factor…

published November 19, 2014

CVSS
—
EPSS
2%
Percentile
81.2
In the wild
Unconfirmed
What it is

FreeIPA 4.0.x before 4.0.5 and 4.1.x before 4.1.1, when 2FA is enabled, allows remote attackers to bypass the password requirement of the two-factor authentication leveraging an enabled OTP token, which triggers an anonymous bind.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02072 · 81.2th percentile
Published
2014-11-19T18:00Z
EPSS history
Timeline
  • 19 NOV 18:00Z
    FreeIPA 4.0.x before 4.0.5 and 4.1.x before 4.1.1, when 2FA is enabled, allows remote attackers to bypass the password requirement of the two-factor…
    cvelistv5