CVE-2016-5404
Fixed in a distro release EPSS 3%
The cert_revoke command in FreeIPA does not check for the "revoke certificate" permission, which allows remote authenticated users to revoke arbitrary certificates by leveraging the "retrieve certificate" permission.
Products: freeipa, oracle linux, fedoraproject fedora
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | freeipa | 4.12.5-r0 |
| Chainguard | freeipa-doc | 4.12.5-r0 |
| Chainguard | py3.13-ipaclient | 4.12.5-r0 |
| Chainguard | py3.13-ipalib | 4.12.5-r0 |
| Chainguard | py3.13-ipaplatform | 4.12.5-r0 |
| Chainguard | py3.13-ipapython | 4.12.5-r0 |
| Chainguard | py3.13-ipaserver | 4.12.5-r0 |
| Chainguard | py3.13-ipatests | 4.12.5-r0 |
| Debian 12 | freeipa | 4.3.2-5 |
| Debian 13 | freeipa | 4.3.2-5 |
| Red Hat Enterprise Linux 6 | ipa | 0:3.0.0-50.el6_8.2 |
| Red Hat Enterprise Linux 6 | ipa-admintools | 0:3.0.0-50.el6_8.2 |
| Red Hat Enterprise Linux 6 | ipa-client | 0:3.0.0-50.el6_8.2 |
| Red Hat Enterprise Linux 6 | ipa-debuginfo | 0:3.0.0-50.el6_8.2 |
| Red Hat Enterprise Linux 6 | ipa-python | 0:3.0.0-50.el6_8.2 |
| Red Hat Enterprise Linux 6 | ipa-server | 0:3.0.0-50.el6_8.2 |
| Red Hat Enterprise Linux 6 | ipa-server-selinux | 0:3.0.0-50.el6_8.2 |
| Red Hat Enterprise Linux 6 | ipa-server-trust-ad | 0:3.0.0-50.el6_8.2 |
| Red Hat Enterprise Linux 7 | ipa | 0:4.2.0-15.el7_2.19 |
| Red Hat Enterprise Linux 7 | ipa-admintools | 0:4.2.0-15.el7_2.19 |
| Red Hat Enterprise Linux 7 | ipa-client | 0:4.2.0-15.el7_2.19 |
| Red Hat Enterprise Linux 7 | ipa-debuginfo | 0:4.2.0-15.el7_2.19 |
| Red Hat Enterprise Linux 7 | ipa-python | 0:4.2.0-15.el7_2.19 |
| Red Hat Enterprise Linux 7 | ipa-server | 0:4.2.0-15.el7_2.19 |
| Red Hat Enterprise Linux 7 | ipa-server-dns | 0:4.2.0-15.el7_2.19 |
| Red Hat Enterprise Linux 7 | ipa-server-trust-ad | 0:4.2.0-15.el7_2.19 |
| Ubuntu Pro 14.04 LTS | freeipa | 3.3.4-0ubuntu3.1+esm1 |
| Ubuntu Pro 16.04 LTS | freeipa | 4.3.1-0ubuntu1+esm1 |