PT-2013-1684 · Red Hat+1 · Red Hat Enterprise Linux 6+2
Publicado
2013-02-20
·
Atualizado
2019-04-22
·
CVE-2012-4546
CVSS v2.0
4.3
Média
| Vetor | AV:N/AC:M/Au:N/C:N/I:P/A:N |
Name of the Vulnerable Software and Affected Versions
Red Hat Enterprise Linux 6 (affected versions not specified)
Description
The issue is related to the default configuration for IPA servers in Red Hat Enterprise Linux 6. When a certificate is revoked from an Identity Management replica, the configuration does not properly update another Identity Management replica. This inconsistency in Certificate Revocation Lists (CRLs) might allow remote attackers to bypass intended access restrictions via a revoked certificate.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Centos
Red Hat
Red Hat Enterprise Linux 6