Debian/freeipa: medium 6.5
The cert_revoke command in FreeIPA does not check for the "revoke certificate" permission, which allows remote authenticated users to revoke arbitrary certificates by leveraging the "retrieve certific
Action: Upgrade freeipa to 4.3.2-5 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.3.2-5 | - |
Fixed versions
| 4.3.2-5 |
Sources
published · modified · JSON