CVE-2016-5404
First published: Wed Sep 07 2016(Updated: )
The cert_revoke command in FreeIPA does not check for the "revoke certificate" permission, which allows remote authenticated users to revoke arbitrary certificates by leveraging the "retrieve certificate" permission.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat FreeIPA | ||
| Oracle Linux | =6 | |
| Oracle Linux | =7 | |
| Red Hat Fedora | =23 | |
| Red Hat Fedora | =24 | |
| Red Hat Fedora | =25 |
Remedy
https://git.fedorahosted.org/cgit/freeipa.git/commit/?id=cf74584d0f772f3f5eccc1d30c001e4212a104fd
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://rhn.redhat.com/errata/RHSA-2016-1797.html
- http://www.openwall.com/lists/oss-security/2016/08/17/9
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.html
- http://www.securityfocus.com/bid/92525
- https://fedorahosted.org/freeipa/ticket/6232
- https://git.fedorahosted.org/cgit/freeipa.git/commit/?id=cf74584d0f772f3f5eccc1d30c001e4212a104fd
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3PZ2ZQTMGC2UBRNHXVVOY3PJDOBP4CP4/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/S5OROLKFSY5QRQS7NGBNDP5QMOBV3XMZ/
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VQDYWANTMDFZP3HTGSEOA2IONVUITYX5/
Frequently Asked Questions
What is the severity of CVE-2016-5404?
CVE-2016-5404 is classified as a medium severity vulnerability.
How do I fix CVE-2016-5404?
To resolve CVE-2016-5404, ensure appropriate permission checks are implemented for the cert_revoke command in FreeIPA.
Which versions of FreeIPA are affected by CVE-2016-5404?
CVE-2016-5404 affects all versions of FreeIPA that are currently in use.
Can unauthorized users exploit CVE-2016-5404?
Yes, CVE-2016-5404 allows remote authenticated users to revoke arbitrary certificates without proper permissions.
Is there a workaround for CVE-2016-5404?
Implementing strict access controls on certificate management permissions is a recommended workaround for CVE-2016-5404.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/severity
- agent/references
- agent/remedy
- agent/weakness
- agent/event
- agent/description
- agent/first-publish-date
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/freeipa
- canonical/red hat freeipa
- vendor/oracle
- canonical/oracle linux
- version/oracle linux/6
- version/oracle linux/7
- vendor/fedoraproject
- canonical/red hat fedora
- version/red hat fedora/23
- version/red hat fedora/24
- version/red hat fedora/25