Red Hat Security AdvisoryRHSA-2013:0188
ipa security update
Released 2013-01-23 · Red Hat rating Important · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) ipa-2.2.0-17.el6_3.1, ipa-client-2.2.0-17.el6_3.1, ipa-python-2.2.0-17.el6_3.1
- Red Hat Enterprise Linux Desktop Optional (v. 6) ipa-2.2.0-17.el6_3.1, ipa-admintools-2.2.0-17.el6_3.1, ipa-server-2.2.0-17.el6_3.1 +1
- Red Hat Enterprise Linux HPC Node (v. 6) ipa-2.2.0-17.el6_3.1, ipa-client-2.2.0-17.el6_3.1, ipa-python-2.2.0-17.el6_3.1
- Red Hat Enterprise Linux HPC Node Optional (v. 6) ipa-2.2.0-17.el6_3.1, ipa-admintools-2.2.0-17.el6_3.1, ipa-server-2.2.0-17.el6_3.1 +1
- Red Hat Enterprise Linux Server (v. 6) ipa-2.2.0-17.el6_3.1, ipa-admintools-2.2.0-17.el6_3.1, ipa-client-2.2.0-17.el6_3.1 +3
- Red Hat Enterprise Linux Workstation (v. 6) ipa-2.2.0-17.el6_3.1, ipa-admintools-2.2.0-17.el6_3.1, ipa-client-2.2.0-17.el6_3.1 +3
Fixes 1 record
Priority LOW 35
The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority (CA) certificate from the server, which allows man-in-the-middle attackers to spoof a join procedure via a crafted certi…
CVSS 2.0HIGH 7.9· Adjacent network · No auth · Interaction — · EPSS 0.00611 · Published 2013-01-27 · Fixed CWE-310
