Описание
ipa 3.0 does not properly check server identity before sending credential containing cookies
Отчет
Not vulnerable. This issue did not affect the versions of ipa-client and ipa as shipped with Red Hat Enterprise Linux 5 or 6.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 5 | ipa-client | Not affected | ||
| Red Hat Enterprise Linux 6 | ipa | Not affected |
Показывать по
10
Дополнительная информация
Статус:
Moderate
https://bugzilla.redhat.com/show_bug.cgi?id=886369ipa: client does not properly check server identity before sending cookies that contain credentials
4.3 Medium
CVSS2
Связанные уязвимости
CVSS3: 8.8
ubuntu
около 6 лет назад
ipa 3.0 does not properly check server identity before sending credential containing cookies
CVSS3: 8.8
nvd
около 6 лет назад
ipa 3.0 does not properly check server identity before sending credential containing cookies
github
почти 4 года назад
ipa 3.0 does not properly check server identity before sending credential containing cookies
4.3 Medium
CVSS2