A flaw was found in all ipa versions 4.x.x through 4.8.0. When sending a very long password (>= 1,000,000 characters) to the server, the password hashing process could exhaust memory and CPU leading to a denial of service and the website becoming unresponsive. The highest threat from this vulnerability is to system availability.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published: 2020-04-27T20:46:52

Updated: 2024-08-04T06:46:30.371Z

Reserved: 2019-11-27T00:00:00

Link: CVE-2020-1722

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2020-04-27T21:15:13.640

Modified: 2024-11-21T05:11:14.500

Link: CVE-2020-1722

cve-icon Redhat

Severity : Low

Publid Date: 2020-04-14T04:26:00Z

Links: CVE-2020-1722 - Bugzilla