High severity · published Jul 27, 2018
CVE-2017-2590
A vulnerability was found in ipa before 4.4
8.1
CVSS
1.3%
EPSS
No
On KEV
Description
A vulnerability was found in ipa before 4.4. IdM's ca-del, ca-disable, and ca-enable commands did not properly check the user's permissions while modifying CAs in Dogtag. An authenticated, unauthorized attacker could use this flaw to delete, disable, or enable CAs causing various denial of service problems with certificate issuance, OCSP signing, and deletion of secret keys.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
None
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
EL
Enterprise Linux · Redhat
7.0 · source: NVD
EL
Enterprise Linux Desktop · Redhat
7.0 · source: NVD
EL
Enterprise Linux Server · Redhat
7.0 · source: NVD
EL
Enterprise Linux Server Aus · Redhat
7.3; 7.4 · source: NVD
EL
Enterprise Linux Server Eus · Redhat
7.3; 7.4; 7.5 · source: NVD
EL
Enterprise Linux Workstation · Redhat
7.0 · source: NVD
FR
Freeipa · Freeipa
before 4.4.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-2590
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-2590
Third Party Advisory
http://rhn.redhat.com/errata/RHSA-2017-0388.html
Third Party Advisory
http://www.securityfocus.com/bid/96557
Issue Tracking
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2590
More from Freeipa
9.8
CVE-2015-5284
ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem, which is world readable
8.8
CVE-2024-2698
A vulnerability was found in FreeIPA in how the initial implementation of MS-SFU by MIT Kerberos was missing a condition for granting the "forwardable" flag on S4U2Self tickets
8.8
CVE-2019-14867
A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all 4.8.x versions before 4.8.3, in the way the internal function ber_scanf() was…
8.8
CVE-2012-5631
ipa 3.0 does not properly check server identity before sending credential containing cookies
8.8
CVE-2017-11191
FreeIPA 4.x with API version 2.213 allows a remote authenticated users to bypass intended account-locking restrictions via an unlock action with an old session ID (for the same…