The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modifying certificate profiles in IdM's certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary naming or key usage information and subsequently use such certificates for other attacks.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade ipa-clientUpgrade ipa-server-commonUpgrade ipa-commonUpgrade python2-ipaclientUpgrade ipa-server-trust-adUpgrade python2-ipaserverUpgrade ipa-serverUpgrade ipa-server-dnsUpgrade python2-ipalibUpgrade ipa-admintoolsUpgrade ipa-client-commonUpgrade ipa-debuginfoUpgrade ipa-python-compat | Jan 27, 2017 | Jan 2, 2017 |
| Debian | — | Upgrade freeipa | Jul 30, 2024 | Mar 13, 2018 |
| Huawei Euleros 2_0_sp1 | — | Upgrade ipa-admintoolsUpgrade ipa-clientUpgrade ipa-serverUpgrade ipa-server-trust-adUpgrade ipa-python | Nov 30, 2017 | Jan 2, 2017 |
| Huawei Euleros 2_0_sp2 | — | Upgrade ipa-admintoolsUpgrade ipa-serverUpgrade ipa-server-trust-adUpgrade ipa-server-dnsUpgrade ipa-pythonUpgrade ipa-client | Nov 30, 2017 | Jan 2, 2017 |
| Oracle_linux | — | Upgrade ipa-server-dnsUpgrade python2-ipaclientUpgrade ipa-admintoolsUpgrade ipa-server-trust-adUpgrade ipa-client-commonUpgrade python2-ipalibUpgrade python2-ipaserverUpgrade ipa-commonUpgrade ipa-server-commonUpgrade ipa-serverUpgrade ipa-python-compatUpgrade ipa-client | Jan 4, 2017 | Dec 14, 2016 |
| Redhat_linux | — | Upgrade python2-ipaserverUpgrade ipa-admintoolsUpgrade ipa-commonUpgrade ipa-server-trust-adUpgrade ipa-serverUpgrade ipa-python-compatUpgrade python2-ipalibUpgrade ipa-clientUpgrade python2-ipaclientUpgrade ipa-client-commonUpgrade ipa-server-commonUpgrade ipa-debuginfoUpgrade ipa-server-dns | Jan 3, 2017 | Jan 2, 2017 |
| Ubuntu | — | Upgrade freeipa-server-trust-ad (Ubuntu Pro)Upgrade python-ipaclient (Ubuntu Pro)Upgrade freeipa-client (Ubuntu Pro)Upgrade python-ipaserver (Ubuntu Pro)Upgrade freeipa-server (Ubuntu Pro)Upgrade python-freeipa (Ubuntu Pro)Upgrade python-ipalib (Ubuntu Pro) | Mar 22, 2023 | Mar 13, 2018 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub