CVE-2012-5484

Published Jan 27, 2013

Last updated 3 months ago

Overview

Description
The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority (CA) certificate from the server, which allows man-in-the-middle attackers to spoof a join procedure via a crafted certificate.
Source
secalert@redhat.com
NVD status
Modified

Risk scores

CVSS 2.0

Type
Primary
Base score
7.9
Impact score
10
Exploitability score
5.5
Vector string
AV:A/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov
CWE-310

Social media

Hype score
Not currently trending

Configurations