Candidate: CVE-2017-2590
PublicDate: 2018-07-27 18:29:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2590
Description:
 A vulnerability was found in ipa before 4.4. IdM's ca-del, ca-disable, and
 ca-enable commands did not properly check the user's permissions while
 modifying CAs in Dogtag. An authenticated, unauthorized attacker could use
 this flaw to delete, disable, or enable CAs causing various denial of
 service problems with certificate issuance, OCSP signing, and deletion of
 secret keys.
Ubuntu-Description:
Notes:
Bugs:
 https://pagure.io/freeipa/issue/6713
Priority: medium
Discovered-by:
Assigned-to:
CVSS:
 nvd: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H [8.1 HIGH]

Patches_freeipa:
upstream_freeipa: released (4.4)
precise_freeipa: ignored (reached end-of-life)
precise/esm_freeipa: DNE (precise was needs-triage)
trusty_freeipa: not-affected (code not present)
trusty/esm_freeipa: not-affected (code not present)
vivid/stable-phone-overlay_freeipa: DNE
vivid/ubuntu-core_freeipa: DNE
xenial_freeipa: not-affected (code not present)
yakkety_freeipa: ignored (reached end-of-life)
zesty_freeipa: ignored (reached end-of-life)
artful_freeipa: ignored (reached end-of-life)
bionic_freeipa: not-affected (4.7.0~pre1+git20180411-2ubuntu2)
cosmic_freeipa: not-affected (4.7.0~pre1+git20180411-2ubuntu2)
devel_freeipa: not-affected (4.7.0~pre1+git20180411-2ubuntu2)