Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
8.1
CVSSv3

CVE-2017-2590

Published: 27/07/2018 Updated: 09/10/2019
CVSS v2 Base Score: 5.5 | Impact Score: 4.9 | Exploitability Score: 8
CVSS v3 Base Score: 8.1 | Impact Score: 5.2 | Exploitability Score: 2.8
VMScore: 490
Vector: AV:N/AC:L/Au:S/C:N/I:P/A:P
Subscribe to Freeipa

Vulnerability Summary

A vulnerability was found in ipa prior to 4.4. IdM's ca-del, ca-disable, and ca-enable commands did not properly check the user's permissions while modifying CAs in Dogtag. An authenticated, unauthorized attacker could use this flaw to delete, disable, or enable CAs causing various denial of service problems with certificate issuance, OCSP signing, and deletion of secret keys.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

freeipa freeipa

redhat enterprise linux server eus 7.4

redhat enterprise linux server eus 7.5

redhat enterprise linux 7.0

redhat enterprise linux server 7.0

redhat enterprise linux server aus 7.3

redhat enterprise linux desktop 7.0

redhat enterprise linux server aus 7.4

redhat enterprise linux server eus 7.3

redhat enterprise linux workstation 7.0

Vendor Advisories

Red Hat: Moderate: ipa security and bug fix update
Synopsis Moderate: ipa security and bug fix update Type/Severity Security Advisory: Moderate Topic An update for ipa is now available for Red Hat Enterprise Linux 7Red Hat Product Security has rated this update as having a security impact of Moderate A Common Vulnerability Scoring System (CVSS) base score ...
Red Hat: CVE-2017-2590
It was found that IdM's ca-del, ca-disable, and ca-enable commands did not properly check the user's permissions while modifying CAs in Dogtag An authenticated, unauthorized attacker could use this flaw to delete, disable, or enable CAs causing various denial of service problems with certificate issuance, OCSP signing, and deletion of secret keys ...

References

CWE-275https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2590http://www.securityfocus.com/bid/96557http://rhn.redhat.com/errata/RHSA-2017-0388.htmlhttps://access.redhat.com/errata/RHSA-2017:0388https://nvd.nist.govhttps://access.redhat.com/security/cve/cve-2017-2590
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-38298CVE-2024-20356CVE-2023-21987CVE-2024-33217bypassCVE-2024-31804CVE-2024-32660unauthorizedSSRF
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook