Catalogo CVE

CVE-2019-14826

freeipa: CVE-2019-14826

Gravità: Low
Published: Sep 17, 2019, 4:15:10 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.34% · Oct 22, 2026

A flaw was found in FreeIPA versions 4.5.0 and later. Session cookies were retained in the cache after logout. An attacker could abuse this flaw if they obtain previously valid session cookies and can use this to gain access to the session.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	freeipa	sid	`4.13.1-1`	vulnerable
Debian	freeipa	trixie	`4.12.4-1`	vulnerable
Debian	freeipa	bookworm	`4.9.11-1`	vulnerable

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	freeipa	source	sid	`(unfixed)`	unimportant	Not reported	[940913]
Debian	freeipa	source	trixie	`(unfixed)`	unimportant	Not reported	[940913]
Debian	freeipa	source	bookworm	`(unfixed)`	unimportant	Not reported	[940913]

[Debian bug #940913]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[freeipa-client]Interessata
Pacchetto sorgente: [freeipa]
Dettagli (2)
- 4.9.11-1 · amd64 · bookworm
  Interessata
  dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
- 4.9.11-1 · arm64 · bookworm
  Interessata
  dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
[freeipa-client-epn]Interessata
Pacchetto sorgente: [freeipa]
Dettagli (2)
- 4.9.11-1 · amd64 · bookworm
  Interessata
  dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
- 4.9.11-1 · arm64 · bookworm
  Interessata
  dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
[freeipa-client-samba]Interessata
Pacchetto sorgente: [freeipa]
Dettagli (2)
- 4.9.11-1 · amd64 · bookworm
  Interessata
  dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
- 4.9.11-1 · arm64 · bookworm
  Interessata
  dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
[freeipa-common]Interessata
Pacchetto sorgente: [freeipa]
Dettagli (2)
- 4.9.11-1 · all · bookworm
  Interessata
  dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
- 4.9.11-1 · all · bookworm
  Interessata
  dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
[python3-ipaclient]Interessata
Pacchetto sorgente: [freeipa]
Dettagli (2)
- 4.9.11-1 · all · bookworm
  Interessata
  dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
- 4.9.11-1 · all · bookworm
  Interessata
  dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
[python3-ipalib]Interessata
Pacchetto sorgente: [freeipa]
Dettagli (2)
- 4.9.11-1 · all · bookworm
  Interessata
  dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12
- 4.9.11-1 · all · bookworm
  Interessata
  dsa · freeipa · debian · bookworm; dsa · freeipa · debian · 12

[Debian 13 (Trixie)]

[freeipa-client]Interessata
Pacchetto sorgente: [freeipa]
Dettagli (2)
- 4.12.4-1 · amd64 · trixie
  Interessata
  dsa · freeipa · debian · 13
- 4.12.4-1 · arm64 · trixie
  Interessata
  dsa · freeipa · debian · 13
[freeipa-client-epn]Interessata
Pacchetto sorgente: [freeipa]
Dettagli (2)
- 4.12.4-1 · amd64 · trixie
  Interessata
  dsa · freeipa · debian · 13
- 4.12.4-1 · arm64 · trixie
  Interessata
  dsa · freeipa · debian · 13
[freeipa-client-samba]Interessata
Pacchetto sorgente: [freeipa]
Dettagli (2)
- 4.12.4-1 · amd64 · trixie
  Interessata
  dsa · freeipa · debian · 13
- 4.12.4-1 · arm64 · trixie
  Interessata
  dsa · freeipa · debian · 13
[freeipa-common]Interessata
Pacchetto sorgente: [freeipa]
Dettagli (2)
- 4.12.4-1 · all · trixie
  Interessata
  dsa · freeipa · debian · 13
- 4.12.4-1 · all · trixie
  Interessata
  dsa · freeipa · debian · 13
[python3-ipaclient]Interessata
Pacchetto sorgente: [freeipa]
Dettagli (2)
- 4.12.4-1 · all · trixie
  Interessata
  dsa · freeipa · debian · 13
- 4.12.4-1 · all · trixie
  Interessata
  dsa · freeipa · debian · 13
[python3-ipalib]Interessata
Pacchetto sorgente: [freeipa]
Dettagli (2)
- 4.12.4-1 · all · trixie
  Interessata
  dsa · freeipa · debian · 13
- 4.12.4-1 · all · trixie
  Interessata
  dsa · freeipa · debian · 13

Osservato: Oct 23, 2026, 5:40:22 PM UTC

Riferimenti

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]