CVE-2017-11191

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2017-11191
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2017-11191.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2017-11191
Published
2017-09-28T01:29:01Z
Modified
2025-07-03T02:10:30.380254Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

FreeIPA 4.x with API version 2.213 allows a remote authenticated users to bypass intended account-locking restrictions via an unlock action with an old session ID (for the same user account) that had been created for an earlier session. NOTE: Vendor states that issue does not exist in product and does not recognize this report as a valid security concern

References

Affected packages

Git / github.com/freeipa/freeipa

Affected ranges

Type
GIT
Repo
https://github.com/freeipa/freeipa
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
02ccfa156380aa97561f191a533de83b668a57f1
Last affected
06cedeec3fb4ac2d9de76c5090ffa75d5076c63c
Last affected
097ff54ebcb23e6438b3bf8022f7a66dd1e13aaa
Last affected
152881ed191b6d26eff99a8d344822b3f4c90065
Last affected
1b46faded422b059996362b9df7fcf1e65283468
Last affected
1e58588ec274d5da0f020b2c6af2824313ea0ea7
Last affected
218de5bff792f5ac40d9b3eebc22f19696e5091e
Last affected
3c542b987860322ca50cfd2e4eb8827b79071d9e
Last affected
43d5c02f8ccb69e07238ac988b849c3722af877c
Last affected
4c1d737656f117a85845fdcd49cbe71459d392e7
Last affected
5083a97f88545b876e9e5fdada35b31b992f9dbe
Last affected
52cf28aae6b51eadb0bf596f9a306647c750632f
Last affected
59e4bc285390886422d5e15314fa8e2fac1cc4bd
Last affected
5a3c3c73c2a59c3f42aefa90feef72a774edd1dc
Last affected
5bcaea7e61da677551e415bf370459b760598ea7
Last affected
60fe517c9b4cc8e6d96605043b2c7685b39bc0ab
Last affected
65a0b586ef72318bf3821a5252f89606e907fa56
Last affected
78a6434e323ebc357472745d97627065ae5b8169
Last affected
7f560c5da14ad36ce9c3d9f17aac756c093ad659
Last affected
92fb05c41f3c7f639238928599f26277dafa7fcf
Last affected
9587efb317ac96d49457b16db2efa004924ad363
Last affected
a0947d94c8f478d57fd20ffbcfe8bde7ee2ba80c
Last affected
a1d3bafcbdb7a100953e61fe42daa1d4cd97ed54
Last affected
a33492da73ac975173c8470f32d32c34b3427b81
Last affected
b402a8dc0fe0ff567a61c7ddde26f66e4f470e24
Last affected
c436352e14a7d3ac4f4cf8888454c6749ddd2f13
Last affected
c55f1530c80cf0ce5857b98826f1f47bc6d55fe9
Last affected
d1b59d5dac1c8d2d6edf3e22aadc30fddb2e56e0
Last affected
e89e825178741de042ca9ed9b603613a73113542
Last affected
ee01ea7e97b96384076befa3074596afd556f492
Last affected
f6f1a21a6a07879028d58700a5887b4d6cf72912

Affected versions

Other

alpha-1-9-0
alpha_1-4-1-0
alpha_1-4-2-0
alpha_1-4-4-0
alpha_2-1-9-0
alpha_3-1-9-0
alpha_4-1-9-0
alpha_5-1-9-0
alpha_5-1-9-0-1
beta_1-2-0-0
beta_1-3-0-0
beta_1-3-2-0
beta_1-3-3-0
beta_2-3-0-0
beta_2-3-3-0
milestone_2
milestone_3
milestone_4
milestone_4_1
milestone_6
rc_1-2-0-0
rc_2-2-0-0
rc_3-2-0-0
release-1-0-0
release-1-1-0
release-2-0-0
release-2-1-0
release-3-1-0
release-3-2-0
release-3-2-0-pre1
release-3-3-0
release-4-0-0
release-4-1-0
release-4-1-1
release-4-2-0
release-4-2-1
release-4-2-2
release-4-4-0
release-4-4-1
release-4-4-2
release-4-4-3
release-4-6-0
release-4-6-1