Ubuntu.comUB:CVE-2012-5631CVE-2012-5631
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.016 Low
EPSS
Percentile
87.4%
ipa 3.0 does not properly check server identity before sending credential
containing cookies
References
bugzilla.redhat.com/show_bug.cgi?id=886369
launchpad.net/bugs/cve/CVE-2012-5631
nvd.nist.gov/vuln/detail/CVE-2012-5631
pagure.io/freeipa/c/9269e5d6ddc85716d2b03c7763cf4b8e1ca67cad
pagure.io/freeipa/c/bfca97f46c92196eb8c52f1b381c95063a5eef45
pagure.io/freeipa/issue/3022
security-tracker.debian.org/tracker/CVE-2012-5631
www.cve.org/CVERecord?id=CVE-2012-5631
Related
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
8.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
0.016 Low
EPSS
Percentile
87.4%