CVE-2019-14826CWE-613

A flaw was found in FreeIPA versions 4.5.0 and later

Medium · published September 17, 2019

CVSS v3.0
5.6
EPSS
0%
Percentile
25.8
In the wild
Unconfirmed
What it is

A flaw was found in FreeIPA versions 4.5.0 and later. Session cookies were retained in the cache after logout. An attacker could abuse this flaw if they obtain previously valid session cookies and can use this to gain access to the session.

The record
Technical detail
CVSS v3.0
5.6 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00336 · 25.8th percentile
Weakness
CWE-613 · Insufficient Session Expiration
Published
2019-09-17T15:09Z
EPSS history
Timeline
  • 17 SEP 15:09Z
    A flaw was found in FreeIPA versions 4.5.0 and later
    cvelistv5