Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modifying certificate profiles in IdM's certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary naming or key usage information and subsequently use such certificates for other attacks.
CVSS Details
- CVSS 3.1 Base Score: 6.3
- CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade ipa-python-compatUpgrade ipa-server-dnsUpgrade ipa-debuginfoUpgrade ipa-client-commonUpgrade ipa-admintoolsUpgrade python2-ipalibUpgrade ipa-serverUpgrade ipa-clientUpgrade python2-ipaclientUpgrade ipa-commonUpgrade ipa-server-commonUpgrade ipa-server-trust-adUpgrade python2-ipaserver | Jan 27, 2017 | Jan 2, 2017 |
| Debian | — | Upgrade freeipa | Jul 30, 2024 | Mar 13, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade ipa-admintoolsUpgrade ipa-serverUpgrade ipa-pythonUpgrade ipa-clientUpgrade ipa-server-trust-ad | Nov 30, 2017 | Jan 2, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ipa-serverUpgrade ipa-admintoolsUpgrade ipa-server-trust-adUpgrade ipa-clientUpgrade ipa-server-dnsUpgrade ipa-python | Nov 30, 2017 | Jan 2, 2017 |
| Oracle_linux | — | Upgrade ipa-server-commonUpgrade ipa-serverUpgrade ipa-python-compatUpgrade ipa-clientUpgrade ipa-commonUpgrade python2-ipaserverUpgrade ipa-server-dnsUpgrade python2-ipaclientUpgrade ipa-server-trust-adUpgrade ipa-admintoolsUpgrade python2-ipalibUpgrade ipa-client-common | Jan 4, 2017 | Dec 14, 2016 |
| Redhat_linux | — | Upgrade ipa-admintoolsUpgrade python2-ipaserverUpgrade ipa-python-compatUpgrade ipa-server-commonUpgrade ipa-serverUpgrade ipa-server-trust-adUpgrade ipa-client-commonUpgrade ipa-commonUpgrade python2-ipaclientUpgrade ipa-clientUpgrade ipa-debuginfoUpgrade python2-ipalibUpgrade ipa-server-dns | Jan 3, 2017 | Jan 2, 2017 |
| Ubuntu | — | Upgrade freeipa-client (Ubuntu Pro)Upgrade python-freeipa (Ubuntu Pro)Upgrade freeipa-server (Ubuntu Pro)Upgrade python-ipaserver (Ubuntu Pro)Upgrade python-ipalib (Ubuntu Pro)Upgrade freeipa-server-trust-ad (Ubuntu Pro)Upgrade python-ipaclient (Ubuntu Pro) | Mar 22, 2023 | Mar 13, 2018 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub