CVE-2015-5284 ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem, which is world readable.
CriticalCVSS 9.8
EPSS 0.99%
- Published
- Updated
- Exploit status
- No public exploit known
Description
ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem, which is world readable.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| freeipa | <= 4.2.1 | No fix listed |
References
- bugzilla.redhat.com issue-tracking mailing-list patch third-party-advisory
- bugzilla.redhat.com issue-tracking third-party-advisory
- pagure.io third-party-advisory
- [Freeipa-interest] 20151008 Announcing FreeIPA 4.2.2 mailing-list third-party-advisory
- Debian Security Tracker CVE-2015-5284 vendor-advisory