---
id: CVE-2024-1481
title: 'Freeipa: specially crafted http requests potentially lead to denial of service'
summary: >-
  A flaw was found in FreeIPA. This issue may allow a remote attacker to craft a
  HTTP request with parameters that can be interpreted as command arguments to
  kinit on the FreeIPA server, which can lead to a denial of service.
severity: medium
cvss: 5.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L'
cvssSource: cna
cwe:
  - CWE-20
vendor: Red Hat
product: freeipa
affected:
  - freeipa 4.10.1
  - 'idm:client (all versions)'
  - 'idm:DL1 (all versions)'
  - ipa (all versions)
  - ipa
ssvc:
  exploitation: none
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2024-04-11T15:43:06.494851Z'
published: '2024-04-10'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T11:44:01.973Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2024-1481'
references:
  - url: 'https://access.redhat.com/errata/RHSA-2024:2147'
    label: 'RHSA-2024:2147'
  - url: 'https://access.redhat.com/errata/RHSA-2024:3044'
    label: 'RHSA-2024:3044'
  - url: 'https://access.redhat.com/security/cve/CVE-2024-1481'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2262169'
    label: RHBZ#2262169
tags:
  - cve.org
epss: 0.01133
epssPercentile: 0.66555
ingestedAt: '2026-11-05T21:36:00.825Z'
---

## Overview

A flaw was found in FreeIPA. This issue may allow a remote attacker to craft a HTTP request with parameters that can be interpreted as command arguments to kinit on the FreeIPA server, which can lead to a denial of service.

## Affected

- `freeipa 4.10.1`
- `idm:client (all versions)`
- `idm:DL1 (all versions)`
- `ipa (all versions)`
- `ipa`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

### Workarounds

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.