Skip to content
OpenAdvisories

Vendor

himmelblau-idm

10 known vulnerabilities.

Products

himmelblau 10
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.3
    CVE-2026-34397

    himmelblau: NSS fake-primary group lookup reintroduces name collision risk

    Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. From versions 2.0.0-alpha to before 2.3.9 and 3.0.0-alpha to before 3.1.1, there is a conditional local privilege escalation vulnerability in an edge-case naming collision. Only …

    himmelblau-idm himmelblau
  • Medium 4.4
    CVE-2025-59044

    Himmelblau vulnerable to GID collision via group name-derived mapping (privilege escalation)

    Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. Himmelblau 0.9.x derives numeric GIDs for Entra ID groups from the group display name when himmelblau.conf `id_attr_map = name` (the default configuration). Because Microsoft Ent…

    himmelblau-idm himmelblau
  • Medium 5.2
    CVE-2025-53013

    Himmelblau offline auth permits authentication with invalid Hello PIN

    Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. A vulnerability present in versions 0.9.10 through 0.9.16 allows a user to authenticate to a Linux host via Himmelblau using an *invalid* Linux Hello PIN, provided the host is of…

    himmelblau-idm himmelblau
  • Medium 5.4
    CVE-2025-49012

    Himmelblau's Name-Based Group Matching in `pam_allow_groups` Leads to Potential Security Bypass

    Himmelblau is an interoperability suite for Microsoft Azure Entra ID and Intune. Himmelblau versions 0.9.0 through 0.9.14 and 1.00-alpha are vulnerable to a privilege escalation issue when Entra ID group-based access restrictions are configured using group di…

    himmelblau-idm himmelblau