CVE-2017-11191

FreeIPA 4.x with API version 2.213 allows a remote authenticated users to bypass intended account-locking restrictions via an unlock action with an old session…

published September 27, 2017

CVSS
—
EPSS
2%
Percentile
76.7
In the wild
Unconfirmed
What it is

FreeIPA 4.x with API version 2.213 allows a remote authenticated users to bypass intended account-locking restrictions via an unlock action with an old session ID (for the same user account) that had been created for an earlier session. NOTE: Vendor states that issue does not exist in product and does not recognize this report as a valid security concern

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01687 · 76.7th percentile
Published
2017-09-27T19:00Z
EPSS history
Timeline
  • 27 SEP 19:00Z
    FreeIPA 4.x with API version 2.213 allows a remote authenticated users to bypass intended account-locking restrictions via an unlock action with an old session…
    cvelistv5