PT-2018-5096 · Red Hat+3 · Ipa+4

Liam Campbell · Publicado 2017-01-02 · Atualizado 2021-03-15 · CVE-2016-9575

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ipa versions 4.2.x through 4.4.2

Description The issue allows an authenticated, unprivileged attacker to modify certificate profiles in IdM's certprofile-mod command due to improper permission checks. This could enable the attacker to issue certificates with arbitrary naming or key usage information, potentially leading to further attacks.

Recommendations For Ipa versions 4.2.x, 4.3.x before 4.3.3, and 4.4.x before 4.4.3, update to version 4.3.3 or 4.4.3, respectively, to resolve the issue. As a temporary workaround, consider restricting access to the certprofile-mod command to minimize the risk of exploitation.

Correção

Improper Authorization

Incorrect Authorization

Enumeração de Fraquezas

CWE-285

CWE-863

Identificadores relacionados

ALT-PU-2017-1168

ALT-PU-2017-1531

CESA-2017_0001

CVE-2016-9575

RHSA-2017:0001

RHSA-2017_0001

USN-4792-1

Produtos afetados

Alt Linux

Centos

Ipa

Red Hat

Ubuntu

Referências · 31

• https://ubuntu.com/security/notices/USN-4792-1 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2016-5404 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2016-7030 · Aviso do Fabricante
• https://linux.oracle.com/errata/ELSA-2017-0001.html · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2016-9575 · Aviso do Fabricante
• https://errata.altlinux.org/ALT-PU-2017-1531 · Aviso do Fabricante
• https://rhn.redhat.com/errata/RHSA-2017-0001.html · Nota
• https://access.redhat.com/security/cve/CVE-2016-7030 · Nota
• http://securityfocus.com/bid/95068 · Nota
• https://cve.org/CVERecord?id=CVE-2016-9575 · Nota de Segurança
• https://lists.centos.org/pipermail/centos-announce/2017-January/084352.html · Nota
• https://access.redhat.com/security/cve/CVE-2016-9575 · Nota
• https://osv.dev/vulnerability/CVE-2016-9575 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2016-9575 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-4792-1 · Aviso do Fabricante