CVE-2015-5284

ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem, which is world readable...

CVE-2015-5284

CVE-2015-5284 (FreeIPA) Impact: In FreeIPA versions before 4.2.2, ipa-kra-install stores the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem with world-readable permissions. This could allow an attacker to access the CA private key and potentially issue certificates (effect...

CVE-2015-5284: Exposure of Sensitive Information to an Unauthorized Actor

ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem, which is world readable...

PT-2017-6842

Name of the Vulnerable Software and Affected Versions FreeIPA versions prior to 4.2.2 Description The issue concerns the installation of ipa-kra-install in FreeIPA, where the CA agent certificate and private key are stored in a world-readable file, /etc/httpd/alias/kra-agent.pem. Recommendations...