CVE-2024-1481

Name of the Vulnerable Software and Affected Versions FreeIPA (affected versions not specified)

Description The issue is related to insufficient input validation in the ipautil.py script's run() function on the FreeIPA server, specifically with the user parameter (/sip/session/login password). This may allow a remote attacker to craft HTTP requests that can be interpreted as command arguments to kinit on the FreeIPA server, potentially leading to unauthorized access to protected information or a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.