CPE Details
Red Hat Enterprise Linux Server 9.0 on ARM64
9.0
2024-01-16
18h04 +00:00
18h04 +00:00
2024-01-16
18h04 +00:00
18h04 +00:00
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
CPE Name: cpe:2.3:o:redhat:enterprise_linux_server:9.0:*:*:*:*:*:arm64:*
Informations
Vendor
redhatProduct
enterprise_linux_serverVersion
9.0Target Hardware
arm64Related CVE
| CVE ID | Publié | Description | Score | Gravité |
|---|---|---|---|---|
| A Cross-site request forgery vulnerability exists in ipa/session/login_password in all supported versions of IPA. This flaw allows an attacker to trick the user into submitting a request that could perform actions as the user, resulting in a loss of confidentiality and system integrity. During community penetration testing it was found that for certain HTTP end-points FreeIPA does not ensure CSRF protection. Due to implementation details one cannot use this flaw for reflection of a cookie representing already logged-in user. An attacker would always have to go through a new authentication attempt. | 6.5 |
Moyen |
||
| A buffer overflow vulnerability was found in the Netfilter subsystem in the Linux Kernel. This issue could allow the leakage of both stack and heap addresses, and potentially allow Local Privilege Escalation to the root user via arbitrary code execution. | 7.8 |
Haute |
2025©
tesweb SA
