CVE-2019-14826: Medium severity red hat freeipa vulnerability
Published Sep 17, 2019
·Updated
A flaw was found in FreeIPA versions 4.5.0 and later. Session cookies were retained in the cache after logout. An attacker could abuse this flaw if they obtain previously valid session cookies and can use this to gain access to the session.
Affected Software
3 affected components
FreeIPA FreeIPA>=4.5.0
redhat Enterprise Linux=7.0
redhat Enterprise Linux=8.0
Event History
Sep 17, 2019
CVE Published
via MITRE·03:09 PM
Data Sourced
via MITRE·03:09 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-14826?
CVE-2019-14826 is considered a high severity vulnerability due to the potential for session hijacking.
2
How do I fix CVE-2019-14826?
To fix CVE-2019-14826, upgrade FreeIPA to the latest version that addresses this vulnerability.
3
What versions are affected by CVE-2019-14826?
CVE-2019-14826 affects FreeIPA versions 4.5.0 and later.
4
What is the primary issue with CVE-2019-14826?
The primary issue with CVE-2019-14826 is session cookies being retained in the cache after logout, allowing unauthorized access.
5
Can CVE-2019-14826 be exploited remotely?
Yes, CVE-2019-14826 can be exploited remotely if an attacker obtains previously valid session cookies.