CVE-2016-5404

The cert_revoke command in FreeIPA does not check for the "revoke certificate" permission, which allows remote authenticated users to revoke arbitrary certificates by leveraging the "retrieve certificate" permission.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
LOW
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 64%
Affected Products (NVD)
VendorProductVersion
freeipafreeipa
-
𝑥
= Vulnerable software versions
Debian logo
Debian Releases
Debian Product
Codename
freeipa
bookworm
4.9.11-1
fixed
sid
4.11.1-2.1
fixed
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
freeipa
artful
not-affected
bionic
not-affected
cosmic
not-affected
disco
not-affected
eoan
not-affected
focal
not-affected
groovy
not-affected
hirsute
not-affected
impish
not-affected
jammy
not-affected
precise
ignored
trusty
not-affected
xenial
Fixed 4.3.1-0ubuntu1+esm1
released
yakkety
ignored
zesty
not-affected
Red Hat logo
Red Hat Enterprise Linux Releases
Red Hat Product
Release
ipa-admintools
RHEL 6
0:3.0.0-50.el6_8.2
fixed
RHEL 7
0:4.2.0-15.el7_2.19
fixed
ipa-client
RHEL 6
0:3.0.0-50.el6_8.2
fixed
RHEL 7
0:4.2.0-15.el7_2.19
fixed
ipa-python
RHEL 6
0:3.0.0-50.el6_8.2
fixed
RHEL 7
0:4.2.0-15.el7_2.19
fixed
ipa-server
RHEL 6
0:3.0.0-50.el6_8.2
fixed
RHEL 7
0:4.2.0-15.el7_2.19
fixed
ipa-server-dns
RHEL 7
0:4.2.0-15.el7_2.19
fixed
ipa-server-selinux
RHEL 6
0:3.0.0-50.el6_8.2
fixed
ipa-server-trust-ad
RHEL 6
0:3.0.0-50.el6_8.2
fixed
RHEL 7
0:4.2.0-15.el7_2.19
fixed
References