Home/CVE/The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority (CA) certificate fro
CVE

CVE-2012-5484

The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority (CA) certificate fro

The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority (CA) certificate from the server, which allows man-in-the-middle attackers to spoof a join procedure via a crafted certificate.

HIGH · CVSS 7.9 EPSS 0.00462
Schedule remediation
  • CVSS base score ≥ 7.0
Sigma rules0 YARA rules0
▤

Affected Products & Versions

1
redhat freeipaall versions
▤

Affected Packages

2
Language-ecosystem packages (from OSV) tied to this CVE, with the version that fixes it - the dependency-level detail NVD doesn’t carry.
PyPI freeipa fixed in 91f4af7e6af53e1c6bf17ed36cb2161863eddae4, 18eea90ebb24a9c22248f0b7e18646cc6e3e3e0f, a1991aeac19c3fec1fdd0d184c6760c90c9f9fc9, 31e41eea6c2322689826e6065ceba82551c565aa, a40285c5a0288669b72f9d991508d4405885bffc
PyPI ipa fixed in 91f4af7e6af53e1c6bf17ed36cb2161863eddae4, 18eea90ebb24a9c22248f0b7e18646cc6e3e3e0f, a1991aeac19c3fec1fdd0d184c6760c90c9f9fc9, 31e41eea6c2322689826e6065ceba82551c565aa, a40285c5a0288669b72f9d991508d4405885bffc
▣

Scoring & Timeline

7.9
HIGH · CVSS v2 (legacy) · secalert@redhat.com
View on NVD
This CVE predates CVSS v3; the legacy v2 score is shown so triage still has a severity to work with.
v2 Vector
AV:A/AC:M/Au:N/C:C/I:C/A:C
Published to NVD27 Jan 2013 · 06:55 PM
⚑

Vendor Advisories

2
rhsaRHSA-2013:0188Important
rhsaRHSA-2013:0189Important
🔗

References & Sources

9
Source URLs (vendor pages, mailing lists, write-ups). Exploit/PoC links are in their own section above to avoid duplication.
http://git.fedorahosted.org/cgit/freeipa.git/commit/?id=18eea90ebb24a9c22248f0b7e18646cc6e3e3e0f
http://git.fedorahosted.org/cgit/freeipa.git/commit/?id=31e41eea6c2322689826e6065ceba82551c565aa
http://git.fedorahosted.org/cgit/freeipa.git/commit/?id=91f4af7e6af53e1c6bf17ed36cb2161863eddae4
http://git.fedorahosted.org/cgit/freeipa.git/commit/?id=a1991aeac19c3fec1fdd0d184c6760c90c9f9fc9
http://git.fedorahosted.org/cgit/freeipa.git/commit/?id=a40285c5a0288669b72f9d991508d4405885bffc
http://rhn.redhat.com/errata/RHSA-2013-0188.html
Intelligence Graph · click any node to traverse
CVETechnique ActorTool Family
drag to reposition · click any node to traverse · button top-right enlarges
External lookups - second-class, for what we don’t hold ourselves
NVDCVE.orgCISAVulnersExploit-DBGitHub PoCVulnCheck KEVGreyNoise
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh  ·  Open-source threat intelligence platform  ·  100+ authoritative sources  ·  Every fact traces to its origin