ipa security update

2016-09-0100:00:00

linux.oracle.com

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

59.7%

JSON

[3.0.0-50.el6.2]

Resolves: #1351593 CVE-2016-5404 ipa: Insufficient privileges check in
certificate revocation
- cert-revoke: fix permission check bypass (CVE-2016-5404)

OSVersionArchitecturePackageVersionFilename
oracle linux6srcipa< 3.0.0-50.el6_8.2ipa-3.0.0-50.el6_8.2.src.rpm
oracle linux6i686ipa-admintools< 3.0.0-50.el6_8.2ipa-admintools-3.0.0-50.el6_8.2.i686.rpm
oracle linux6i686ipa-client< 3.0.0-50.el6_8.2ipa-client-3.0.0-50.el6_8.2.i686.rpm
oracle linux6i686ipa-python< 3.0.0-50.el6_8.2ipa-python-3.0.0-50.el6_8.2.i686.rpm
oracle linux6i686ipa-server< 3.0.0-50.el6_8.2ipa-server-3.0.0-50.el6_8.2.i686.rpm
oracle linux6i686ipa-server-selinux< 3.0.0-50.el6_8.2ipa-server-selinux-3.0.0-50.el6_8.2.i686.rpm
oracle linux6i686ipa-server-trust-ad< 3.0.0-50.el6_8.2ipa-server-trust-ad-3.0.0-50.el6_8.2.i686.rpm
oracle linux6srcipa< 3.0.0-50.el6_8.2ipa-3.0.0-50.el6_8.2.src.rpm
oracle linux6x86_64ipa-admintools< 3.0.0-50.el6_8.2ipa-admintools-3.0.0-50.el6_8.2.x86_64.rpm
oracle linux6x86_64ipa-client< 3.0.0-50.el6_8.2ipa-client-3.0.0-50.el6_8.2.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
oracle linux	6	src	ipa	< 3.0.0-50.el6_8.2	ipa-3.0.0-50.el6_8.2.src.rpm
oracle linux	6	i686	ipa-admintools	< 3.0.0-50.el6_8.2	ipa-admintools-3.0.0-50.el6_8.2.i686.rpm
oracle linux	6	i686	ipa-client	< 3.0.0-50.el6_8.2	ipa-client-3.0.0-50.el6_8.2.i686.rpm
oracle linux	6	i686	ipa-python	< 3.0.0-50.el6_8.2	ipa-python-3.0.0-50.el6_8.2.i686.rpm
oracle linux	6	i686	ipa-server	< 3.0.0-50.el6_8.2	ipa-server-3.0.0-50.el6_8.2.i686.rpm
oracle linux	6	i686	ipa-server-selinux	< 3.0.0-50.el6_8.2	ipa-server-selinux-3.0.0-50.el6_8.2.i686.rpm
oracle linux	6	i686	ipa-server-trust-ad	< 3.0.0-50.el6_8.2	ipa-server-trust-ad-3.0.0-50.el6_8.2.i686.rpm
oracle linux	6	src	ipa	< 3.0.0-50.el6_8.2	ipa-3.0.0-50.el6_8.2.src.rpm
oracle linux	6	x86_64	ipa-admintools	< 3.0.0-50.el6_8.2	ipa-admintools-3.0.0-50.el6_8.2.x86_64.rpm
oracle linux	6	x86_64	ipa-client	< 3.0.0-50.el6_8.2	ipa-client-3.0.0-50.el6_8.2.x86_64.rpm