| Package | Affected versions | Patched versions |
|---|---|---|
| freeipa | = 4.0.0= 4.0.1= 4.0.2= 4.0.3= 4.0.4= 4.1.1 |
FreeIPA 4.0.x before 4.0.5 and 4.1.x before 4.1.1, when 2FA is enabled, allows remote attackers to bypass the password requirement of the two-factor authentication leveraging an enabled OTP token, which triggers an anonymous bind.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free