CVE-2016-9575
- State
- Published
- Severity
- Not scored
- Published
- Mar 13, 2018
- Updated
- Sep 16, 2024
- Reserved
- Nov 23, 2016
Description
Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modifying certificate profiles in IdM's certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary naming or key usage information and subsequently use such certificates for other attacks.
Scores
The record has no CVSS score.
Weaknesses
Affected Products
| Product | Versions |
|---|---|
ipaFreeIPA |
|
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1395311
- 95068vdb-entry
- RHSA-2017:0001vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.