Catalogo CVE

CVE-2017-2590

freeipa: CVE-2017-2590

Gravità: High · CVSS 8.1CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Published: Mar 2, 2017, 5:06:32 PM UTC
Source: [NVD] · [CVE record]
EPSS: 1.27% · Oct 22, 2026

A vulnerability was found in ipa before 4.4. IdM's ca-del, ca-disable, and ca-enable commands did not properly check the user's permissions while modifying CAs in Dogtag. An authenticated, unauthorized attacker could use this flaw to delete, disable, or enable CAs causing various denial of service problems with certificate issuance, OCSP signing, and deletion of secret keys.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	freeipa	sid	`4.13.1-1`	not affected
Debian	freeipa	trixie	`4.12.4-1`	not affected
Debian	freeipa	bookworm	`4.9.11-1`	not affected

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	freeipa	source	sid	`Not affected`	unimportant	Not reported	Not reported
Debian	freeipa	source	trixie	`Not affected`	unimportant	Not reported	Not reported
Debian	freeipa	source	bookworm	`Not affected`	unimportant	Not reported	Not reported

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[freeipa-client]Non interessata
Pacchetto sorgente: [freeipa]
Dettagli (2)
- 4.9.11-1 · amd64 · bookworm
  Non interessata
  dsa · freeipa · debian · bookworm
- 4.9.11-1 · arm64 · bookworm
  Non interessata
  dsa · freeipa · debian · bookworm
[freeipa-client-epn]Non interessata
Pacchetto sorgente: [freeipa]
Dettagli (2)
- 4.9.11-1 · amd64 · bookworm
  Non interessata
  dsa · freeipa · debian · bookworm
- 4.9.11-1 · arm64 · bookworm
  Non interessata
  dsa · freeipa · debian · bookworm
[freeipa-client-samba]Non interessata
Pacchetto sorgente: [freeipa]
Dettagli (2)
- 4.9.11-1 · amd64 · bookworm
  Non interessata
  dsa · freeipa · debian · bookworm
- 4.9.11-1 · arm64 · bookworm
  Non interessata
  dsa · freeipa · debian · bookworm
[freeipa-common]Non interessata
Pacchetto sorgente: [freeipa]
Dettagli (2)
- 4.9.11-1 · all · bookworm
  Non interessata
  dsa · freeipa · debian · bookworm
- 4.9.11-1 · all · bookworm
  Non interessata
  dsa · freeipa · debian · bookworm
[python3-ipaclient]Non interessata
Pacchetto sorgente: [freeipa]
Dettagli (2)
- 4.9.11-1 · all · bookworm
  Non interessata
  dsa · freeipa · debian · bookworm
- 4.9.11-1 · all · bookworm
  Non interessata
  dsa · freeipa · debian · bookworm
[python3-ipalib]Non interessata
Pacchetto sorgente: [freeipa]
Dettagli (2)
- 4.9.11-1 · all · bookworm
  Non interessata
  dsa · freeipa · debian · bookworm
- 4.9.11-1 · all · bookworm
  Non interessata
  dsa · freeipa · debian · bookworm

Osservato: Oct 23, 2026, 5:29:01 PM UTC

Riferimenti

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX]