Все бюллетени/p8/ALT-PU-2017-1171-1
ALT-PU-2017-1171-1

Обновление пакета freeipa в ветке p8

Версия4.3.2-alt6.M80P.1
Задание#178238
Опубликовано2017-02-16
Макс. серьёзностьHIGH
Серьёзность:

Закрытые проблемы (2)

CVE-2016-7030
HIGH7.5

FreeIPA uses a default password policy that locks an account after 5 unsuccessful authentication attempts, which allows remote attackers to cause a denial of service by locking out the account in which system services run on.

Опубликовано: 2017-08-28Изменено: 2025-04-20
CVSS 2.0СРЕДНЯЯ 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:N/A:P
CVSS 3.xВЫСОКАЯ 7.5
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Ссылки
CVE-2016-9575
MEDIUM6.3

Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modifying certificate profiles in IdM's certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary naming or key usage information and subsequently use such certificates for other attacks.

Опубликовано: 2018-03-13Изменено: 2024-11-21
CVSS 2.0СРЕДНЯЯ 6.5
CVSS:2.0/AV:N/AC:L/Au:S/C:P/I:P/A:P
CVSS 3.xСРЕДНЯЯ 6.3
CVSS:3.x/CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Ссылки

Закрытые ошибки (2)