CVE-2016-5414: High severity red hat freeipa vulnerability
FreeIPA 4.4.0 allows remote attackers to request an arbitrary SAN name for services.
Other sources
It was found that FreeIPA fails to check the CA ACLs properly, moreover the SAN name is incorrectly checked for service principals which means someone can request an arbitrary SAN name for services.
The vulnerable code was added in the 4.4.0 release, which is not yet available in Fedora or RHEL.
— Red Hat
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2016-5414?
CVE-2016-5414 is rated as a medium severity vulnerability.
How do I fix CVE-2016-5414?
To fix CVE-2016-5414, upgrade FreeIPA to a version that includes the patch for this vulnerability.
Who is affected by CVE-2016-5414?
CVE-2016-5414 affects FreeIPA version 4.4.0.
What type of vulnerability is CVE-2016-5414?
CVE-2016-5414 is a security bug that allows remote attackers to request arbitrary SAN names for services.
Can CVE-2016-5414 lead to further attacks?
Yes, CVE-2016-5414 could potentially be exploited to impersonate services through arbitrary SAN name requests.