Vulnerabilities (CVE)

Filtered by vendor Freeipa Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2015-5284 1 Freeipa 1 Freeipa 2017-10-04 5.0 MEDIUM 9.8 CRITICAL
ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem, which is world readable.