CVE-2012-5484: FreeIPA Client Man-in-the-Middle Vulnerability
Summary
CVE-2012-5484: The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority (CA) certificate from the server, which allows man-in-the-middle attackers to spoof a join procedure via a crafted certi... Affects freeipa across 5 version ranges.
< 18eea90ebb24a9c22248f0b7e18646cc6e3e3e0f
< 31e41eea6c2322689826e6065ceba82551c565aa
< 91f4af7e6af53e1c6bf17ed36cb2161863eddae4
< a1991aeac19c3fec1fdd0d184c6760c90c9f9fc9
< a40285c5a0288669b72f9d991508d4405885bffc
Fixed in 91f4af7e6af53e1c6bf17ed36cb2161863eddae4. How to fix ↓
Also tracked for
- ipa · PyPI
The same CVE-2012-5484 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
FreeIPA is an open-source identity management solution that provides centralized authentication, authorization, and account information. It is widely used in enterprise environments to manage user identities and access control. The vulnerability in question affects versions 2.x and 3.x of FreeIPA, prior to 3.1.2, where the client fails to properly obtain the Certification Authority (CA) certificate from the server, making it susceptible to man-in-the-middle attacks.
Vulnerability Detail
The vulnerability arises from the FreeIPA client not correctly retrieving the CA certificate from the server. This flaw allows an attacker to perform a man-in-the-middle attack by spoofing the join procedure with a crafted certificate. If exploited, this could lead to unauthorized access to sensitive data and compromise the integrity of the authentication process.
How To Fix
Minimum fixed version
91f4af7e6af53e1c6bf17ed36cb2161863eddae4
This is the first release that contains the fix.
pip install --upgrade "freeipa==91f4af7e6af53e1c6bf17ed36cb2161863eddae4"Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can manually verify the CA certificate before proceeding with any join procedures. This can help mitigate the risk of man-in-the-middle attacks until the package is updated.
Conclusion
The CVE-2012-5484 vulnerability in FreeIPA poses a significant risk due to its potential for man-in-the-middle attacks. Users are strongly advised to update to the latest patched version to safeguard their systems. Utilizing tools like Vulert can help in monitoring for such vulnerabilities effectively.
See every vulnerability recorded for freeipa →
FAQ
CVE-2012-5484 is a vulnerability in the FreeIPA client that allows man-in-the-middle attacks due to improper handling of the Certification Authority certificate.
FreeIPA versions 2.x and 3.x prior to 3.1.2 are affected by this vulnerability.
You can use Vulert to monitor and alert for open-source vulnerabilities in your software. Visit Vulert Scanner to check if your application is affected without requiring signup.
Exploitation of this vulnerability could allow attackers to gain unauthorized access to sensitive data and compromise the integrity of user authentication.
If immediate updates are not possible, ensure to manually verify CA certificates and monitor for any suspicious activity in your environment.
Related vulnerabilities
Recent vulnerabilities recorded for freeipa.
