CVE-2017-2590
CVE-2017-2590
Vexday Risk Score
21Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS 8.1EPSS 1.3%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado
Ciclo de vida
27 jul 2018Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A vulnerability was found in ipa before 4.4. IdM's ca-del, ca-disable, and ca-enable commands did not properly check the user's permissions while modifying CAs in Dogtag. An authenticated, unauthorized attacker could use this flaw to delete, disable, or enable CAs causing various denial of service problems with certificate issuance, OCSP signing, and deletion of secret keys.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Productos afectados
Red Hat · ipa¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →