Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modifying certificate profiles in IdM's certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary naming or key usage information and subsequently use such certificates for other attacks.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade ipa-admintoolsUpgrade ipa-python-compatUpgrade python2-ipalibUpgrade ipa-server-dnsUpgrade ipa-debuginfoUpgrade ipa-client-commonUpgrade python2-ipaclientUpgrade ipa-server-trust-adUpgrade ipa-server-commonUpgrade ipa-serverUpgrade python2-ipaserverUpgrade ipa-commonUpgrade ipa-client | Jan 27, 2017 | Jan 2, 2017 |
| Debian | — | Upgrade freeipa | Jul 30, 2024 | Mar 13, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade ipa-admintoolsUpgrade ipa-server-trust-adUpgrade ipa-pythonUpgrade ipa-serverUpgrade ipa-client | Nov 30, 2017 | Jan 2, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ipa-server-trust-adUpgrade ipa-serverUpgrade ipa-admintoolsUpgrade ipa-pythonUpgrade ipa-server-dnsUpgrade ipa-client | Nov 30, 2017 | Jan 2, 2017 |
| Oracle_linux | — | Upgrade ipa-server-trust-adUpgrade python2-ipaclientUpgrade ipa-server-dnsUpgrade python2-ipalibUpgrade python2-ipaserverUpgrade ipa-admintoolsUpgrade ipa-client-commonUpgrade ipa-commonUpgrade ipa-serverUpgrade ipa-server-commonUpgrade ipa-python-compatUpgrade ipa-client | Jan 4, 2017 | Dec 14, 2016 |
| Redhat_linux | — | Upgrade ipa-admintoolsUpgrade python2-ipaserverUpgrade ipa-commonUpgrade python2-ipalibUpgrade ipa-server-commonUpgrade ipa-client-commonUpgrade python2-ipaclientUpgrade ipa-server-trust-adUpgrade ipa-server-dnsUpgrade ipa-serverUpgrade ipa-debuginfoUpgrade ipa-python-compatUpgrade ipa-client | Jan 3, 2017 | Jan 2, 2017 |
| Ubuntu | — | Upgrade python-ipalib (Ubuntu Pro)Upgrade python-ipaserver (Ubuntu Pro)Upgrade freeipa-client (Ubuntu Pro)Upgrade python-freeipa (Ubuntu Pro)Upgrade freeipa-server (Ubuntu Pro)Upgrade python-ipaclient (Ubuntu Pro)Upgrade freeipa-server-trust-ad (Ubuntu Pro) | Mar 22, 2023 | Mar 13, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub