https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T15:08:13.554889+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2016-13103 cnvd-2016-13103 2026-10-02T15:08:13.633998+00:00 cnvd-2016-13103 https://cve.radiocsirt.org/vuln/euvd-2026-174938 EUVD-2026-174938 2026-10-02T15:08:13.634036+00:00 EUVD-2026-174938 https://cve.radiocsirt.org/vuln/fkie_cve-2016-9575 fkie_cve-2016-9575 2026-10-02T15:08:13.634051+00:00

Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modifying certificate profiles in IdM's certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary naming or key usage information and subsequently use such certificates for other attacks.

 https://cve.radiocsirt.org/vuln/ghsa-x7vx-p547-m5m5 GHSA-x7vx-p547-m5m5 2026-10-02T15:08:13.634082+00:00

Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modifying certificate profiles in IdM's certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary naming or key usage information and subsequently use such certificates for other attacks.

 https://cve.radiocsirt.org/vuln/gsd-2016-9575 gsd-2016-9575 2026-10-02T15:08:13.634101+00:00 gsd-2016-9575 https://cve.radiocsirt.org/vuln/rhsa-2017:0001 RHSA-2017:0001 — Red Hat Security Advisory: ipa security update 2026-10-02T15:08:13.634113+00:00

ipa: DoS attack against kerberized services by abusing password policy ipa: Insufficient permission check in certprofile-mod

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-9575 UBUNTU-CVE-2016-9575 2026-10-02T15:08:13.634134+00:00

Affected: Ubuntu:Pro:16.04:LTS: freeipa

Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modifying certificate profiles in IdM's certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary naming or key usage information and subsequently use such certificates for other attacks.