{"action":"Upgrade ipa to 4.6.7 or later.","affected":[{"fixed":"4.6.7","introduced":"4.6.2"},{"fixed":"4.7.4","introduced":"4.7.0"},{"fixed":"4.8.3","introduced":"4.8.0"}],"component":"ipa","cve_ids":["CVE-2019-14867"],"ecosystem":"PyPI","epss":0.07413,"exploited":false,"fixed_versions":["4.6.7","4.7.4","4.8.3"],"ghsa_id":"GHSA-7hpj-hfcr-5qwm","id":"tcs_01M5KG97CH0K56NRT71EKPER4R","modified_at":"2026-07-06T08:11:04.645383601Z","published_at":"2019-11-27T09:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2019-28","https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14867","https://www.freeipa.org/page/Releases/4.8.3","https://www.freeipa.org/page/Releases/4.6.7","https://www.freeipa.org/page/Releases/4.7.4","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WLFL5XDCJ3WT6JCLCQVKHZBLHGW7PW4T/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/67SEUWJAJ5RMH5K4Q6TS2I7HIMXUGNKF/","https://access.redhat.com/errata/RHSA-2020:0378","https://access.redhat.com/errata/RHBA-2019:4268","https://github.com/advisories/GHSA-7hpj-hfcr-5qwm"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2019-28","url":"https://osv.dev/vulnerability/PYSEC-2019-28"}],"summary":"A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was used in some components"}