CVE catalog
CVE-2017-2590
freeipa: CVE-2017-2590
- Severity
- High · CVSS 8.1
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 1.27% · Oct 22, 2026
A vulnerability was found in ipa before 4.4. IdM's ca-del, ca-disable, and ca-enable commands did not properly check the user's permissions while modifying CAs in Dogtag. An authenticated, unauthorized attacker could use this flaw to delete, disable, or enable CAs causing various denial of service problems with certificate issuance, OCSP signing, and deletion of secret keys.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | freeipa | sid | 4.13.1-1 | not affected |
| Debian | freeipa | trixie | 4.12.4-1 | not affected |
| Debian | freeipa | bookworm | 4.9.11-1 | not affected |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | freeipa | source | sid | Not affected | unimportant | Not reported | Not reported |
| Debian | freeipa | source | trixie | Not affected | unimportant | Not reported | Not reported |
| Debian | freeipa | source | bookworm | Not affected | unimportant | Not reported | Not reported |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [freeipa-client]Not affected
Source package: [freeipa]
Details (2)
4.9.11-1· amd64 · bookwormNot affected
dsa · freeipa · debian · bookworm
4.9.11-1· arm64 · bookwormNot affected
dsa · freeipa · debian · bookworm
- [freeipa-client-epn]Not affected
Source package: [freeipa]
Details (2)
4.9.11-1· amd64 · bookwormNot affected
dsa · freeipa · debian · bookworm
4.9.11-1· arm64 · bookwormNot affected
dsa · freeipa · debian · bookworm
- [freeipa-client-samba]Not affected
Source package: [freeipa]
Details (2)
4.9.11-1· amd64 · bookwormNot affected
dsa · freeipa · debian · bookworm
4.9.11-1· arm64 · bookwormNot affected
dsa · freeipa · debian · bookworm
- [freeipa-common]Not affected
Source package: [freeipa]
Details (2)
4.9.11-1· all · bookwormNot affected
dsa · freeipa · debian · bookworm
4.9.11-1· all · bookwormNot affected
dsa · freeipa · debian · bookworm
- [python3-ipaclient]Not affected
Source package: [freeipa]
Details (2)
4.9.11-1· all · bookwormNot affected
dsa · freeipa · debian · bookworm
4.9.11-1· all · bookwormNot affected
dsa · freeipa · debian · bookworm
- [python3-ipalib]Not affected
Source package: [freeipa]
Details (2)
4.9.11-1· all · bookwormNot affected
dsa · freeipa · debian · bookworm
4.9.11-1· all · bookwormNot affected
dsa · freeipa · debian · bookworm
Observed: