https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 06:42:23 +0000 https://cve.radiocsirt.org/vuln/cnvd-2016-13103 cnvd-2016-13103 https://cve.radiocsirt.org/vuln/cnvd-2016-13103 https://cve.radiocsirt.org/vuln/euvd-2026-174938 EUVD-2026-174938 https://cve.radiocsirt.org/vuln/euvd-2026-174938 https://cve.radiocsirt.org/vuln/fkie_cve-2016-9575 <p>Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user&#39;s permissions while modifying certificate profiles in IdM&#39;s certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary naming or key usage information and subsequently use such certificates for other attacks.</p> <p>Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user&#39;s permissions while modifying certificate profiles in IdM&#39;s certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary naming or key usage information and subsequently use such certificates for other attacks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-9575 https://cve.radiocsirt.org/vuln/ghsa-x7vx-p547-m5m5 <p>Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user&#39;s permissions while modifying certificate profiles in IdM&#39;s certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary naming or key usage information and subsequently use such certificates for other attacks.</p> <p>Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user&#39;s permissions while modifying certificate profiles in IdM&#39;s certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary naming or key usage information and subsequently use such certificates for other attacks.</p> https://cve.radiocsirt.org/vuln/ghsa-x7vx-p547-m5m5 https://cve.radiocsirt.org/vuln/gsd-2016-9575 gsd-2016-9575 https://cve.radiocsirt.org/vuln/gsd-2016-9575 https://cve.radiocsirt.org/vuln/rhsa-2017:0001 <p>ipa: DoS attack against kerberized services by abusing password policy ipa: Insufficient permission check in certprofile-mod</p> <p>ipa: DoS attack against kerberized services by abusing password policy ipa: Insufficient permission check in certprofile-mod</p> https://cve.radiocsirt.org/vuln/rhsa-2017:0001 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-9575 <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: freeipa</p> <p>Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user&#39;s permissions while modifying certificate profiles in IdM&#39;s certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary naming or key usage information and subsequently use such certificates for other attacks.</p> <p><strong>Affected:</strong> Ubuntu:Pro:16.04:LTS: freeipa</p> <p>Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user&#39;s permissions while modifying certificate profiles in IdM&#39;s certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary naming or key usage information and subsequently use such certificates for other attacks.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-9575