Red Hat Security AdvisoryRHSA-2016:1797
ipa security update
Released 2016-09-01 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) ipa-4.2.0-15.el7_2.19, ipa-client-4.2.0-15.el7_2.19, ipa-python-4.2.0-15.el7_2.19
- Red Hat Enterprise Linux Client Optional (v. 7) ipa-admintools-4.2.0-15.el7_2.19, ipa-server-4.2.0-15.el7_2.19, ipa-server-dns-4.2.0-15.el7_2.19 +1
- Red Hat Enterprise Linux ComputeNode (v. 7) ipa-4.2.0-15.el7_2.19, ipa-client-4.2.0-15.el7_2.19, ipa-python-4.2.0-15.el7_2.19
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) ipa-admintools-4.2.0-15.el7_2.19, ipa-server-4.2.0-15.el7_2.19, ipa-server-dns-4.2.0-15.el7_2.19 +1
- Red Hat Enterprise Linux Desktop (v. 6) ipa-3.0.0-50.el6_8.2, ipa-client-3.0.0-50.el6_8.2, ipa-python-3.0.0-50.el6_8.2
- Red Hat Enterprise Linux Desktop Optional (v. 6) ipa-admintools-3.0.0-50.el6_8.2, ipa-server-3.0.0-50.el6_8.2, ipa-server-selinux-3.0.0-50.el6_8.2 +1
- Red Hat Enterprise Linux HPC Node (v. 6) ipa-3.0.0-50.el6_8.2, ipa-client-3.0.0-50.el6_8.2, ipa-python-3.0.0-50.el6_8.2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) ipa-admintools-3.0.0-50.el6_8.2, ipa-server-3.0.0-50.el6_8.2, ipa-server-selinux-3.0.0-50.el6_8.2 +1
- Red Hat Enterprise Linux Server (v. 6) ipa-3.0.0-50.el6_8.2, ipa-admintools-3.0.0-50.el6_8.2, ipa-client-3.0.0-50.el6_8.2 +4
- Red Hat Enterprise Linux Server (v. 7) ipa-4.2.0-15.el7_2.19, ipa-admintools-4.2.0-15.el7_2.19, ipa-client-4.2.0-15.el7_2.19 +4
- Red Hat Enterprise Linux Workstation (v. 6) ipa-3.0.0-50.el6_8.2, ipa-admintools-3.0.0-50.el6_8.2, ipa-client-3.0.0-50.el6_8.2 +4
- Red Hat Enterprise Linux Workstation (v. 7) ipa-4.2.0-15.el7_2.19, ipa-admintools-4.2.0-15.el7_2.19, ipa-client-4.2.0-15.el7_2.19 +4
Fixes 1 record
Priority LOW 34
The cert_revoke command in FreeIPA does not check for the "revoke certificate" permission, which allows remote authenticated users to revoke arbitrary certificates by leveraging the "retrieve certificate" permission.
CVSS 3.0MEDIUM 6.5· Network · Low privileges · No interaction · EPSS 0.02607 · Published 2016-09-07 · Fixed CWE-284
