CVE-2012-5484 The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority (CA) certificate from the server, which allows man-in-the-middle attackers to spoof a join procedure...
HighCVSS 7.9
EPSS 0.61%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority (CA) certificate from the server, which allows man-in-the-middle attackers to spoof a join procedure via a crafted certificate.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi freeipa(PyPI) | All versions | No fix listed |
| pypi freeipa(PyPI) | = 4.10.2 | No fix listed |
| pypi freeipa(PyPI) | = 4.12.2 | No fix listed |
| pypi freeipa(PyPI) | = 4.4.0.dev1 | No fix listed |
| pypi freeipa(PyPI) | = 4.5.0 | No fix listed |
| pypi freeipa(PyPI) | = 4.5.2 | No fix listed |
| pypi freeipa(PyPI) | = 4.5.4 | No fix listed |
| pypi freeipa(PyPI) | = 4.6.1 | No fix listed |
| pypi freeipa(PyPI) | = 4.6.2 | No fix listed |
| pypi freeipa(PyPI) | = 4.6.3 | No fix listed |
| pypi freeipa(PyPI) | = 4.6.4 | No fix listed |
| pypi freeipa(PyPI) | = 4.6.5 | No fix listed |
| pypi freeipa(PyPI) | = 4.6.7 | No fix listed |
| pypi freeipa(PyPI) | = 4.7.0 | No fix listed |
| pypi freeipa(PyPI) | = 4.7.1 | No fix listed |
| pypi freeipa(PyPI) | = 4.7.2 | No fix listed |
| pypi freeipa(PyPI) | = 4.7.4 | No fix listed |
| pypi freeipa(PyPI) | = 4.7.5 | No fix listed |
| pypi freeipa(PyPI) | = 4.8.0 | No fix listed |
| pypi freeipa(PyPI) | = 4.8.0rc1 | No fix listed |
| pypi freeipa(PyPI) | = 4.8.1 | No fix listed |
| pypi freeipa(PyPI) | = 4.8.2 | No fix listed |
| pypi freeipa(PyPI) | = 4.8.3 | No fix listed |
| pypi freeipa(PyPI) | = 4.8.5 | No fix listed |
| pypi freeipa(PyPI) | = 4.8.6 | No fix listed |
Show 43 more
| Product | Affected versions | Fixed in |
|---|---|---|
| pypi freeipa(PyPI) | = 4.8.7 | No fix listed |
| pypi freeipa(PyPI) | = 4.8.9 | No fix listed |
| pypi freeipa(PyPI) | = 4.9.12 | No fix listed |
| pypi freeipa(PyPI) | = 4.13.1 | No fix listed |
| pypi ipa(PyPI) | All versions | No fix listed |
| pypi ipa(PyPI) | = 4.10.2 | No fix listed |
| pypi ipa(PyPI) | = 4.12.2 | No fix listed |
| pypi ipa(PyPI) | = 4.4.0.dev1 | No fix listed |
| pypi ipa(PyPI) | = 4.5.0 | No fix listed |
| pypi ipa(PyPI) | = 4.5.2 | No fix listed |
| pypi ipa(PyPI) | = 4.5.4 | No fix listed |
| pypi ipa(PyPI) | = 4.6.2 | No fix listed |
| pypi ipa(PyPI) | = 4.6.3 | No fix listed |
| pypi ipa(PyPI) | = 4.6.4 | No fix listed |
| pypi ipa(PyPI) | = 4.6.5 | No fix listed |
| pypi ipa(PyPI) | = 4.6.7 | No fix listed |
| pypi ipa(PyPI) | = 4.7.0 | No fix listed |
| pypi ipa(PyPI) | = 4.7.1 | No fix listed |
| pypi ipa(PyPI) | = 4.7.2 | No fix listed |
| pypi ipa(PyPI) | = 4.7.4 | No fix listed |
| pypi ipa(PyPI) | = 4.7.5 | No fix listed |
| pypi ipa(PyPI) | = 4.8.0 | No fix listed |
| pypi ipa(PyPI) | = 4.8.0rc1 | No fix listed |
| pypi ipa(PyPI) | = 4.8.1 | No fix listed |
| pypi ipa(PyPI) | = 4.8.2 | No fix listed |
| pypi ipa(PyPI) | = 4.8.3 | No fix listed |
| pypi ipa(PyPI) | = 4.8.5 | No fix listed |
| pypi ipa(PyPI) | = 4.8.6 | No fix listed |
| pypi ipa(PyPI) | = 4.8.7 | No fix listed |
| pypi ipa(PyPI) | = 4.8.9 | No fix listed |
| pypi ipa(PyPI) | = 4.9.12 | No fix listed |
| pypi ipa(PyPI) | = 4.13.1 | No fix listed |
| redhat freeipa | = 2.0.0 | No fix listed |
| redhat freeipa | = 2.0.1 | No fix listed |
| redhat freeipa | = 2.1.0 | No fix listed |
| redhat freeipa | = 2.1.1 | No fix listed |
| redhat freeipa | = 2.1.3 | No fix listed |
| redhat freeipa | = 2.1.4 | No fix listed |
| redhat freeipa | = 2.2.1 | No fix listed |
| redhat freeipa | = 3.0.0 | No fix listed |
| redhat freeipa | = 3.0.1 | No fix listed |
| redhat freeipa | = 3.0.2 | No fix listed |
| redhat freeipa | = 3.1.1 | No fix listed |
References
- www.freeipa.org vendor-advisory
- git.fedorahosted.org
- git.fedorahosted.org
- git.fedorahosted.org
- git.fedorahosted.org
- git.fedorahosted.org
- www.freeipa.org
- RHSA-2013:0188 vendor-advisory
- RHSA-2013:0189 vendor-advisory