Curated security research, vulnerabilities, advisories and tools for practitioners.

Attacking FreeIPA — Part IV: CVE-2020–10747

Summary

I was informed on Wednesday June 17th 2020 that CVE 2020–10747 was revoked after it had been initially issued on June 15th 2020. Red Hat issued this statement regarding the security boundary for FreeIPA and as justification for the revocation. Roles are used to classify permitted actions but are not used as a tool to implement privilege […]
Published
Collected