RedHatRHSA-2016:1797(RHSA-2016:1797) Moderate: ipa security update
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
0.002 Low
EPSS
Percentile
59.2%
Red Hat Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments.
Security Fix(es):
- An insufficient permission check issue was found in the way IPA server treats certificate revocation requests. An attacker logged in with the ‘retrieve certificate’ permission enabled could use this flaw to revoke certificates, possibly triggering a denial of service attack. (CVE-2016-5404)
This issue was discovered by Fraser Tweedale (Red Hat).
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 6 | ppc64 | ipa-admintools | < 3.0.0-50.el6_8.2 | ipa-admintools-3.0.0-50.el6_8.2.ppc64.rpm |
| RedHat | 6 | i686 | ipa-admintools | < 3.0.0-50.el6_8.2 | ipa-admintools-3.0.0-50.el6_8.2.i686.rpm |
| RedHat | 6 | x86_64 | ipa-server-selinux | < 3.0.0-50.el6_8.2 | ipa-server-selinux-3.0.0-50.el6_8.2.x86_64.rpm |
| RedHat | 7 | x86_64 | ipa-server-trust-ad | < 4.2.0-15.el7_2.19 | ipa-server-trust-ad-4.2.0-15.el7_2.19.x86_64.rpm |
| RedHat | 6 | x86_64 | ipa-server-trust-ad | < 3.0.0-50.el6_8.2 | ipa-server-trust-ad-3.0.0-50.el6_8.2.x86_64.rpm |
| RedHat | 6 | i686 | ipa-python | < 3.0.0-50.el6_8.2 | ipa-python-3.0.0-50.el6_8.2.i686.rpm |
| RedHat | 6 | i686 | ipa-server-selinux | < 3.0.0-50.el6_8.2 | ipa-server-selinux-3.0.0-50.el6_8.2.i686.rpm |
| RedHat | 7 | x86_64 | ipa-debuginfo | < 4.2.0-15.el7_2.19 | ipa-debuginfo-4.2.0-15.el7_2.19.x86_64.rpm |
| RedHat | 6 | ppc64 | ipa-debuginfo | < 3.0.0-50.el6_8.2 | ipa-debuginfo-3.0.0-50.el6_8.2.ppc64.rpm |
| RedHat | 6 | s390x | ipa-admintools | < 3.0.0-50.el6_8.2 | ipa-admintools-3.0.0-50.el6_8.2.s390x.rpm |
Related
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:N/I:N/A:P
0.002 Low
EPSS
Percentile
59.2%