PT-2024-17718 · Debian+7 · Freeipa

Published 2024-02-06 · Updated 2024-11-19 · CVE-2024-1271

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned as vulnerable in the provided descriptions.

Description The issue under investigation involves privileges escalation from root to domain admin. However, it has been noted that the flaw requires an attacker to have superuser credentials, which already permits all impacts and thus does not constitute a security vulnerability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2024-1271

Affected Products

Freeipa

References · 9

• https://security-tracker.debian.org/tracker/CVE-2024-1271 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-1271 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-1271 · Security Note
• https://cve.org/CVERecord?id=CVE-2024-1271 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-1271 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-1271 · Vendor Advisory
• https://t.me/cvedetector/11515 · Telegram Post
• https://bugzilla.redhat.com/show_bug.cgi?id=2262978 · Note
• https://twitter.com/VulmonFeeds/status/1754922059702903246 · Twitter Post