Lucene search
HistoryDec 08, 2011 - 11:55 a.m.
CVE-2011-3636
cve-2011-3636
csrf
vulnerability
freeipa
authentication
administrators
configuration changes
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
49.3%
Cross-site request forgery (CSRF) vulnerability in the management interface in FreeIPA before 2.1.4 allows remote attackers to hijack the authentication of administrators for requests that make configuration changes.
Affected configurations
Node
redhatfreeipaRange≤2.1.3
ORredhatfreeipaMatch0.99
ORredhatfreeipaMatch0.99698-20080228
ORredhatfreeipaMatch0.99698641-20080218
ORredhatfreeipaMatch1.0.0
ORredhatfreeipaMatch1.0.0a
ORredhatfreeipaMatch1.0.0b
ORredhatfreeipaMatch1.1.0
ORredhatfreeipaMatch1.1.1
ORredhatfreeipaMatch1.2.0
ORredhatfreeipaMatch1.2.1
ORredhatfreeipaMatch1.2.2
ORredhatfreeipaMatch1.9.0pre1
ORredhatfreeipaMatch1.9.0pre2
ORredhatfreeipaMatch1.9.0pre3
ORredhatfreeipaMatch1.9.0pre4
ORredhatfreeipaMatch1.9.0pre5
ORredhatfreeipaMatch2.0.0
ORredhatfreeipaMatch2.0.0pre1
ORredhatfreeipaMatch2.0.0pre2
ORredhatfreeipaMatch2.0.0rc1
ORredhatfreeipaMatch2.0.0rc2
ORredhatfreeipaMatch2.0.0rc3
ORredhatfreeipaMatch2.0.1
ORredhatfreeipaMatch2.1.0
ORredhatfreeipaMatch2.1.1
ORredhatfreeipaMatch2.1.2
References
Related
nessus
nessus
Scientific Linux Security Update : ipa on SL6.x i386/x86_64
2012-08-01 00:00:00
Oracle Linux 6 : ipa (ELSA-2011-1533)
2023-09-07 00:00:00
RHEL 6 : ipa (RHSA-2011:1533)
2011-12-06 00:00:00
openvas
openvas
RedHat Update for ipa RHSA-2011:1533-04
2012-07-09 00:00:00
Oracle: Security Advisory (ELSA-2011-1533)
2015-10-06 00:00:00
RedHat Update for ipa RHSA-2011:1533-04
2012-07-09 00:00:00
oraclelinux
oraclelinux
ipa security and bug fix update
2011-12-14 00:00:00
veracode
veracode
Cross-site Request Forgery (CSRF)
2020-04-10 01:06:55
cvelist
cvelist
CVE-2011-3636
2011-12-08 11:00:00
prion
prion
Cross site request forgery (csrf)
2011-12-08 11:55:00
nvd
nvd
CVE-2011-3636
2011-12-08 11:55:01
redhat
redhat
(RHSA-2011:1533) Moderate: ipa security and bug fix update
2011-12-06 00:00:00
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
49.3%
Related for CVE-2011-3636