CVE-2016-9575 Vulnerability Details

  /     /     /  

CVE-2016-9575 Metadata Quick Info

CVE Published: 13/03/2018 | CVE Updated: 16/09/2024 | CVE Year: 2016
Source: redhat | Vendor: FreeIPA | Product: ipa
Status : PUBLISHED

---

CVE-2016-9575 Description

Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user\'s permissions while modifying certificate profiles in IdM\'s certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary naming or key usage information and subsequently use such certificates for other attacks.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-863
CWE Name: CWE-863
Source: FreeIPA

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).