ipa: weakness when initiating join from IPA client can potentially compromise IPA domain

The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority CA certificate from the server, which allows man-in-the-middle attackers to spoof a join procedure via a crafted certificate...

PT-2013-1178

Name of the Vulnerable Software and Affected Versions FreeIPA versions prior to 3.1.2 ipa-client versions 2.1.3 through 2.2.0 ipa-server versions 2.2.0 ipa-python versions 2.2.0 ipa-admintools versions 2.2.0 ipa-server-selinux versions 2.2.0 ipa-debuginfo versions 2.2.0 Description The client in...

Fedora 18 : freeipa-3.1.0-1.fc18 (2012-20123)

Update to upstream 3.1.0. Addresses CVE-2012-5631, improper cookie handling. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

RedHat Update for sssd RHSA-2011:0560-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

WS-2012-0018

In FreeIPA, alpha-1-9-0 to rc1-2-1-90 there is a public exposure of DNS records to anyone who has access to the LDAP server System Network Configuration Discovery which later can serve an attacker for lateral movement...

CVE-2011-3636

Cross-site request forgery CSRF vulnerability in the management interface in FreeIPA before 2.1.4 allows remote attackers to hijack the authentication of administrators for requests that make configuration changes...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the management interface in FreeIPA before 2.1.4 allows remote attackers to hijack the authentication of administrators for requests that make configuration changes...

CVE-2011-3636

Cross-site request forgery CSRF vulnerability in the management interface in FreeIPA before 2.1.4 allows remote attackers to hijack the authentication of administrators for requests that make configuration changes...

CVE-2011-3636

CVE-2011-3636 describes a CSRF vulnerability in the FreeIPA management interface prior to 2.1.4. The flaw allows an attacker to hijack an administrator’s session and perform configuration-changing requests without authorization. Affected component: FreeIPA management UI. Root cause: CSRF in the w...

CVE-2011-3636: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the management interface in FreeIPA before 2.1.4 allows remote attackers to hijack the authentication of administrators for requests that make configuration changes...

RHEL 6 : ipa (RHSA-2011:1533)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:1533 advisory. Red Hat Identity Management is a centralized authentication, identity management and authorization solution for both traditional and cloud based...

FreeIPA: CSRF vulnerability

Cross-site request forgery CSRF vulnerability in the management interface in FreeIPA before 2.1.4 allows remote attackers to hijack the authentication of administrators for requests that make configuration changes...

PT-2011-4552 · Red Hat · Freeipa +1

Name of the Vulnerable Software and Affected Versions: FreeIPA versions prior to 2.1.4 Description: A cross-site request forgery CSRF issue exists in the management interface, allowing remote attackers to hijack the authentication of administrators for requests that make configuration changes...

RedHat Update for sssd RHSA-2011:0975-01

Check for the Version of sssd OpenVAS Vulnerability Test RedHat Update for sssd RHSA-2011:0975-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Fedora Update for sssd FEDORA-2011-5815

Check for the Version of sssd OpenVAS Vulnerability Test Fedora Update for sssd FEDORA-2011-5815 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

[SECURITY] Fedora 14 Update: sssd-1.5.7-1.fc14

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable backend system to connect to multiple different account sources. It is also the basis to provide client auditing and policy servic...

[SECURITY] Fedora 15 Update: sssd-1.5.7-1.fc15

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable backend system to connect to multiple different account sources. It is also the basis to provide client auditing and policy servic...

Fedora Update for sssd FEDORA-2011-0364

Check for the Version of sssd OpenVAS Vulnerability Test Fedora Update for sssd FEDORA-2011-0364 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

[SECURITY] Fedora 14 Update: sssd-1.5.0-2.fc14

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable backend system to connect to multiple different account sources. It is also the basis to provide client auditing and policy servic...

[SECURITY] Fedora 13 Update: sssd-1.3.0-40.fc13

Provides a set of daemons to manage access to remote directories and authentication mechanisms. It provides an NSS and PAM interface toward the system and a pluggable backend system to connect to multiple different account sources. It is also the basis to provide client auditing and policy servic...