What’s Vulnerable › Vulnerabilities

CVE-2016-9575

• Severity: medium (CVSS 6.3 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-03-13 · updated 2026-06-17
• Weakness: CWE-863

Description

Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modifying certificate profiles in IdM's certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary naming or key usage information and subsequently use such certificates for other attacks.

Affected products

• FreeIPA ipa: 4.2.0, 4.2.0-alpha1, 4.2.1, 4.2.2, 4.2.3, 4.2.4 (+6)

References

• http://rhn.redhat.com/errata/RHSA-2017-0001.html
• http://www.securityfocus.com/bid/95068
• https://bugzilla.redhat.com/show_bug.cgi?id=1395311
• http://rhn.redhat.com/errata/RHSA-2017-0001.html
• http://www.securityfocus.com/bid/95068
• https://bugzilla.redhat.com/show_bug.cgi?id=1395311

Get alerted when CVE-2016-9575 or the next vulnerability affects your stack