Medium severity5.5NVD Advisory· Published Jan 15, 2025· Updated Apr 15, 2026
CVE-2024-11029
CVE-2024-11029
Description
A flaw was found in the FreeIPA API audit, where it sends the whole FreeIPA command line to journalctl. As a consequence, during the FreeIPA installation process, it inadvertently leaks the administrative user credentials, including the administrator password, to the journal database. In the worst-case scenario, where the journal log is centralized, users with access to it can have improper access to the FreeIPA administrator credentials.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
18- osv-coords16 versionspkg:rpm/almalinux/ipa-clientpkg:rpm/almalinux/ipa-client-commonpkg:rpm/almalinux/ipa-client-epnpkg:rpm/almalinux/ipa-client-sambapkg:rpm/almalinux/ipa-commonpkg:rpm/almalinux/ipa-selinuxpkg:rpm/almalinux/ipa-selinux-lunapkg:rpm/almalinux/ipa-selinux-nfastpkg:rpm/almalinux/ipa-serverpkg:rpm/almalinux/ipa-server-commonpkg:rpm/almalinux/ipa-server-dnspkg:rpm/almalinux/ipa-server-trust-adpkg:rpm/almalinux/python3-ipaclientpkg:rpm/almalinux/python3-ipalibpkg:rpm/almalinux/python3-ipaserverpkg:rpm/almalinux/python3-ipatests
< 4.12.2-1.el9_5.3+ 15 more
- (no CPE)range: < 4.12.2-1.el9_5.3
- (no CPE)range: < 4.12.2-1.el9_5.3
- (no CPE)range: < 4.12.2-1.el9_5.3
- (no CPE)range: < 4.12.2-1.el9_5.3
- (no CPE)range: < 4.12.2-1.el9_5.3
- (no CPE)range: < 4.12.2-1.el9_5.3
- (no CPE)range: < 4.12.2-1.el9_5.3
- (no CPE)range: < 4.12.2-1.el9_5.3
- (no CPE)range: < 4.12.2-1.el9_5.3
- (no CPE)range: < 4.12.2-1.el9_5.3
- (no CPE)range: < 4.12.2-1.el9_5.3
- (no CPE)range: < 4.12.2-1.el9_5.3
- (no CPE)range: < 4.12.2-1.el9_5.3
- (no CPE)range: < 4.12.2-1.el9_5.3
- (no CPE)range: < 4.12.2-1.el9_5.3
- (no CPE)range: < 4.12.2-1.el9_5.3
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.