NVD

Id
46612  
Name
CVE-2012-5484  
Description
The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority (CA) certificate from the server, which allows man-in-the-middle attackers to spoof a join procedure via a crafted certificate.  
Reject
 
CVSS Version
2  
CVSS Score
7.9  
Severity
High  
CVSS Base Score
7.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
5.5  
CVSS Vector
(AV:A/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2013-01-27  
Modified Date
2013-02-07  
Seq
2012-5484  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
233424 46612 CVE-2012-5484 http://git.fedorahosted.org/cgit/freeipa.git/commit/?id=18eea90ebb24a9c22248f0b7e18646cc6e3e3e0f  View
233425 46612 CVE-2012-5484 http://git.fedorahosted.org/cgit/freeipa.git/commit/?id=31e41eea6c2322689826e6065ceba82551c565aa  View
233426 46612 CVE-2012-5484 http://git.fedorahosted.org/cgit/freeipa.git/commit/?id=91f4af7e6af53e1c6bf17ed36cb2161863eddae4  View
233427 46612 CVE-2012-5484 http://git.fedorahosted.org/cgit/freeipa.git/commit/?id=a1991aeac19c3fec1fdd0d184c6760c90c9f9fc9  View
233428 46612 CVE-2012-5484 http://git.fedorahosted.org/cgit/freeipa.git/commit/?id=a40285c5a0288669b72f9d991508d4405885bffc  View
233429 46612 CVE-2012-5484 RHSA-2013:0188  View
233430 46612 CVE-2012-5484 RHSA-2013:0189  View
233431 46612 CVE-2012-5484 http://www.freeipa.org/page/CVE-2012-5484  View
233432 46612 CVE-2012-5484 http://www.freeipa.org/page/Releases/3.1.2  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19711 JVNDB-2013-001286 FreeIPA のクライアントにおけるドメイン参加の処理を偽装される脆弱性 FreeIPA のクライアントは、サーバから CA 証明書を適切に取得しないため、ドメイン参加の処理を偽装される脆弱性が存在します。 CVE-2012-5484 58722 CVE-2012-5484 46612 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001286.html 2013-01-23 2013-01-29 View