Description
ipa 3.0 does not properly check server identity before sending credential containing cookies
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| ipa | ipa | Fixed in freeipa 3.0.2, freeipa 3.1.0 | — |
Unscored
CVE-2012-5631
EUVD-2012-5516GHSA-mrjx-9xcm-6w8p
ipa 3.0 does not properly check server identity before sending credential containing cookies
Published Nov 25, 2019 · Updated Aug 6, 2024 · Assigned by redhat