GHSA-2vgj-j756-9gpx

Опубликовано: 17 мая 2022

Источник: github

Github: Не прошло ревью

CVSS3: 9.8

Описание

ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem, which is world readable.

EPSS

Процентиль: 59%

0.00991

Низкий

9.8 Critical

CVSS3

CWE-200

CVE-2015-5284

CVSS3: 9.8

ubuntu

почти 9 лет назад

ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem, which is world readable.

CVE-2015-5284

redhat

почти 11 лет назад

ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem, which is world readable.

CVE-2015-5284

CVSS3: 9.8

nvd

почти 9 лет назад

ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem, which is world readable.

CVE-2015-5284

CVSS3: 9.8

debian

почти 9 лет назад

ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate ...

EPSS

Процентиль: 59%

0.00991

Низкий

9.8 Critical

CVSS3

CWE-200