CVE-2015-5284

Опубликовано: 21 сент. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 5

EPSS Низкий

Описание

ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem, which is world readable.

Ссылки

https://bugzilla.redhat.com/attachment.cgi?id=1075511
Issue Tracking
Mailing List
Patch
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1264790
Issue Tracking
Third Party Advisory
https://pagure.io/freeipa/issue/5347
Third Party Advisory
https://www.redhat.com/archives/freeipa-interest/2015-October/msg00000.html
Mailing List
Third Party Advisory
https://bugzilla.redhat.com/attachment.cgi?id=1075511
Issue Tracking
Mailing List
Patch
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1264790
Issue Tracking
Third Party Advisory
https://pagure.io/freeipa/issue/5347
Third Party Advisory
https://www.redhat.com/archives/freeipa-interest/2015-October/msg00000.html
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:freeipa:freeipa:*:*:*:*:*:*:*:*

Версия до 4.2.1 (включая)

EPSS

Процентиль: 53%

0.00297

Низкий

9.8 Critical

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2015-5284

CVSS3: 9.8

ubuntu

больше 8 лет назад

ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem, which is world readable.

CVE-2015-5284

redhat

больше 10 лет назад

ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem, which is world readable.

CVE-2015-5284

CVSS3: 9.8

debian

больше 8 лет назад

ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate ...

GHSA-2vgj-j756-9gpx

CVSS3: 9.8

github

больше 3 лет назад

ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem, which is world readable.

EPSS

Процентиль: 53%

0.00297

Низкий

9.8 Critical

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200