Read the docs
Red Hat Security Advisory

RHSA-2013:0189

ipa-client security update

Released 2013-01-23 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 1 record

Priority LOW 35

The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority (CA) certificate from the server, which allows man-in-the-middle attackers to spoof a join procedure via a crafted certi…

CVSS 2.0HIGH 7.9 Adjacent network No auth Interaction — EPSS 0.00611 Published 2013-01-27 Fixed CWE-310