CVE-2012-5484

Description

The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority (CA) certificate from the server, which allows man-in-the-middle attackers to spoof a join procedure via a crafted certificate.

Risk Information

Base Score

9.8

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

0.462

Associated Vulnerability

Vulnerability	OS Platform
(RHSA-2013:0189) Important: ipa-client security update ipa-client-2.1.3-5.el5_9.2.i386.rpm	Linux
(RHSA-2013:0189) Important: ipa-client security update ipa-client-2.1.3-5.el5_9.2.x86_64.rpm	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234