VYPR
← All advisories
Medium severity4.4NVD Advisory· Published Sep 17, 2019· Updated Jun 17, 2026

CVE-2019-14826

CVE-2019-14826

Description

A flaw was found in FreeIPA versions 4.5.0 and later. Session cookies were retained in the cache after logout. An attacker could abuse this flaw if they obtain previously valid session cookies and can use this to gain access to the session.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Freeipa/Freeipa2 versions
    cpe:2.3:a:freeipa:freeipa:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:freeipa:freeipa:*:*:*:*:*:*:*:*range: >=4.5.0
    • (no CPE)range: >=4.5.0
  • Red Hat/Enterprise Linux Server2 versions
    cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
    • cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
  • Red Hat/ipav5
    Range: FreeIPA versions 4.5.0 and later

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.