CyberRota Analysis
AI-GeneratedFreeIPA is vulnerable to a denial-of-service attack due to a flaw that allows low-privilege authenticated users to submit oversized One-Time Password (OTP) key values, leading to excessive CPU and memory consumption. This can degrade the availability of the IPA service, making it critical for organizations using FreeIPA to prioritize remediation efforts. System administrators and security teams should assess their environments for potential exploitation and implement necessary mitigations.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversized One-Time Password (OTP) key value. This oversized key is then decoded and re-encoded without proper size limits, consuming excessive CPU and memory resources. This can lead to a denial of service, degrading the availability of the IPA service.
Related CVEs
Other vulnerabilities affecting the same vendor(s)