Vulnerability Description
The cert_revoke command in FreeIPA does not check for the "revoke certificate" permission, which allows remote authenticated users to revoke arbitrary certificates by leveraging the "retrieve certificate" permission.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Freeipa | Freeipa | - |
| Oracle | Linux | 6 |
| Fedoraproject | Fedora | 23 |
Related Weaknesses (CWE)
References
- http://rhn.redhat.com/errata/RHSA-2016-1797.html
- http://www.openwall.com/lists/oss-security/2016/08/17/9Mailing ListThird Party Advisory
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.hThird Party Advisory
- http://www.securityfocus.com/bid/92525Third Party AdvisoryVDB Entry
- https://fedorahosted.org/freeipa/ticket/6232Issue Tracking
- https://git.fedorahosted.org/cgit/freeipa.git/commit/?id=cf74584d0f772f3f5eccc1dIssue TrackingPatch
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro
- http://rhn.redhat.com/errata/RHSA-2016-1797.html
- http://www.openwall.com/lists/oss-security/2016/08/17/9Mailing ListThird Party Advisory
- http://www.oracle.com/technetwork/topics/security/linuxbulletinjul2016-3090544.hThird Party Advisory
- http://www.securityfocus.com/bid/92525Third Party AdvisoryVDB Entry
- https://fedorahosted.org/freeipa/ticket/6232Issue Tracking
- https://git.fedorahosted.org/cgit/freeipa.git/commit/?id=cf74584d0f772f3f5eccc1dIssue TrackingPatch
FAQ
What is CVE-2016-5404?
CVE-2016-5404 is a vulnerability with a CVSS score of 6.5 (MEDIUM). The cert_revoke command in FreeIPA does not check for the "revoke certificate" permission, which allows remote authenticated users to revoke arbitrary certificates by leveraging the "retrieve certific...
How severe is CVE-2016-5404?
CVE-2016-5404 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2016-5404?
Check the references section above for vendor advisories and patch information. Affected products include: Freeipa Freeipa, Oracle Linux, Fedoraproject Fedora.