CVE-2016-7030: Freeipa

High severity, CVSS 7.5. EPSS: 4.7% chance of exploitation in the next 30 days.

FreeIPA uses a default password policy that locks an account after 5 unsuccessful authentication attempts, which allows remote attackers to cause a denial of service by locking out the account in which system services run on.

Affected products

• Freeipa Freeipa: version 4.6.0 only

Published 2017-08-28. Last modified 2026-06-17.