https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 21:18:42 +0000 https://cve.radiocsirt.org/vuln/alsa-2025:0334 <p><strong>Affected:</strong> AlmaLinux:9: ipa-client, AlmaLinux:9: ipa-client-common, AlmaLinux:9: ipa-client-epn, AlmaLinux:9: ipa-client-samba, AlmaLinux:9: ipa-common, AlmaLinux:9: ipa-selinux, AlmaLinux:9: ipa-selinux-luna, AlmaLinux:9: ipa-selinux-nfast, AlmaLinux:9: ipa-server, AlmaLinux:9: ipa-server-common and 6 more</p> <p>AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.</p> <p>Security Fix(es):</p> <p>* freeipa: Administrative user data leaked through systemd journal (CVE-2024-11029)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p><strong>Affected:</strong> AlmaLinux:9: ipa-client, AlmaLinux:9: ipa-client-common, AlmaLinux:9: ipa-client-epn, AlmaLinux:9: ipa-client-samba, AlmaLinux:9: ipa-common, AlmaLinux:9: ipa-selinux, AlmaLinux:9: ipa-selinux-luna, AlmaLinux:9: ipa-selinux-nfast, AlmaLinux:9: ipa-server, AlmaLinux:9: ipa-server-common and 6 more</p> <p>AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.</p> <p>Security Fix(es):</p> <p>* freeipa: Administrative user data leaked through systemd journal (CVE-2024-11029)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2025:0334 https://cve.radiocsirt.org/vuln/bdu:2026-06677 bdu:2026-06677 https://cve.radiocsirt.org/vuln/bdu:2026-06677 https://cve.radiocsirt.org/vuln/euvd-2026-261514 EUVD-2026-261514 https://cve.radiocsirt.org/vuln/euvd-2026-261514 https://cve.radiocsirt.org/vuln/fkie_cve-2024-11029 <p>A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the worst-case scenario, where the journal log is centralized, users with access to it can have improper access to the FreeIPA administrator credentials.</p> <p>A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the worst-case scenario, where the journal log is centralized, users with access to it can have improper access to the FreeIPA administrator credentials.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-11029 https://cve.radiocsirt.org/vuln/ghsa-45q7-xhfm-xqjp <p>A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the worst-case scenario, where the journal log is centralized, users with access to it can have improper access to the FreeIPA administrator credentials.</p> <p>A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the worst-case scenario, where the journal log is centralized, users with access to it can have improper access to the FreeIPA administrator credentials.</p> https://cve.radiocsirt.org/vuln/ghsa-45q7-xhfm-xqjp https://cve.radiocsirt.org/vuln/rhsa-2025:0334 <p>freeipa: Administrative user data leaked through systemd journal</p> <p>freeipa: Administrative user data leaked through systemd journal</p> https://cve.radiocsirt.org/vuln/rhsa-2025:0334 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-11029 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: freeipa, Ubuntu:Pro:16.04:LTS: freeipa, Ubuntu:18.04:LTS: freeipa, Ubuntu:20.04:LTS: freeipa, Ubuntu:22.04:LTS: freeipa, Ubuntu:24.04:LTS: freeipa, Ubuntu:25.10: freeipa, Ubuntu:26.04:LTS: freeipa</p> <p>A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the worst-case scenario, where the journal log is centralized, users with access to it can have improper access to the FreeIPA administrator credentials.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: freeipa, Ubuntu:Pro:16.04:LTS: freeipa, Ubuntu:18.04:LTS: freeipa, Ubuntu:20.04:LTS: freeipa, Ubuntu:22.04:LTS: freeipa, Ubuntu:24.04:LTS: freeipa, Ubuntu:25.10: freeipa, Ubuntu:26.04:LTS: freeipa</p> <p>A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the worst-case scenario, where the journal log is centralized, users with access to it can have improper access to the FreeIPA administrator credentials.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-11029 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0109 <p>Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Informationen offenzulegen.</p> <p>Ein lokaler Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0109