Description
The default configuration for IPA servers in Red Hat Enterprise Linux 6, when revoking a certificate from an Identity Management replica, does not properly update another Identity Management replica, which causes inconsistent Certificate Revocation Lists (CRLs) to be used and might allow remote attackers to bypass intended access restrictions via a revoked certificate.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Red Hat
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| RHEL 6 | ipa +6 | 3.0.0-25.el6 | RHSA-2013:0528 |
Advisories 1
- RHSA-2013:0528 Red Hat Security Advisory: ipa security, bug fix and enhancement update Red Hat Security Advisories (RHSA) · Jun 26, 2026
References
- RHSA-2013:0528 vendor-advisory