Red Hat Security AdvisoryRHSA-2011:1533
ipa security and bug fix update
Released 2011-12-05 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) ipa-2.1.3-9.el6, ipa-client-2.1.3-9.el6, ipa-python-2.1.3-9.el6
- Red Hat Enterprise Linux Desktop Optional (v. 6) ipa-2.1.3-9.el6, ipa-admintools-2.1.3-9.el6, ipa-server-2.1.3-9.el6 +1
- Red Hat Enterprise Linux HPC Node (v. 6) ipa-2.1.3-9.el6, ipa-client-2.1.3-9.el6, ipa-python-2.1.3-9.el6
- Red Hat Enterprise Linux HPC Node Optional (v. 6) ipa-2.1.3-9.el6, ipa-admintools-2.1.3-9.el6, ipa-server-2.1.3-9.el6 +1
- Red Hat Enterprise Linux Server (v. 6) ipa-2.1.3-9.el6, ipa-admintools-2.1.3-9.el6, ipa-client-2.1.3-9.el6 +3
- Red Hat Enterprise Linux Workstation (v. 6) ipa-2.1.3-9.el6, ipa-admintools-2.1.3-9.el6, ipa-client-2.1.3-9.el6 +3
Fixes 1 record
Priority LOW 32
Cross-site request forgery (CSRF) vulnerability in the management interface in FreeIPA before 2.1.4 allows remote attackers to hijack the authentication of administrators for requests that make configuration changes.
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.00812 · Published 2011-12-08 · Fixed CWE-352
