Security Advisory

CVE-2012-5484

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2013-01-27 18:00:00

Last updated 2024-08-06 21:05:47

Assigner redhat

CVSS score not scored

State PUBLISHED

Description

The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority (CA) certificate from the server, which allows man-in-the-middle attackers to spoof a join procedure via a crafted certificate.

← Browse all CVEs View on cve.org ↗