Threat database

Red Hat Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * FreeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-7493) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

A security update addresses a vulnerability in Red Hat Identity Management (IdM) where administrative user data could be leaked through the systemd journal. This issue is tracked as CVE-2024-11029 and affects Red Hat Enterprise Linux 9 and related packages. The vulnerability has been rated as moderate severity by Red Hat. A patch is available to remediate this issue.

A vulnerability (CVE-2024-3183) in Red Hat Identity Management (IdM) allows a user to obtain password hashes of all domain users, enabling offline brute force attacks. This issue affects Red Hat Enterprise Linux 9.0 Extended Update Support and related packages. Red Hat has released security updates to address this vulnerability.