CVE-2019-14826

—

CVSS 3.1

4.4 medium

EPSS

<1%p27

Published

Sep 17, 2019 (Sep 17, 2019)

Modified

Jun 17, 2026

Description

A flaw was found in FreeIPA versions 4.5.0 and later. Session cookies were retained in the cache after logout. An attacker could abuse this flaw if they obtain previously valid session cookies and can use this to gain access to the session.

Vendors: freeipa redhat
Products: freeipa, enterprise linux
Weakness: CWE-613
Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.