CVE-2016-9575

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2016-9575
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-9575.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2016-9575
Downstream
Published
2018-03-13T13:29:00.217Z
Modified
2026-07-07T08:49:13.713332982Z
Severity
  • 6.3 (Medium) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L CVSS Calculator
Summary
[none]
Details

Ipa versions 4.2.x, 4.3.x before 4.3.3 and 4.4.x before 4.4.3 did not properly check the user's permissions while modifying certificate profiles in IdM's certprofile-mod command. An authenticated, unprivileged attacker could use this flaw to modify profiles to issue certificates with arbitrary naming or key usage information and subsequently use such certificates for other attacks.

Database specific 
{
    "unresolved_ranges": [
        {
            "source": "CPE_STRING",
            "cpes": [
                "cpe:2.3:a:freeipa:freeipa:4.2.0:alpha1:*:*:*:*:*:*"
            ],
            "extracted_events": [
                {
                    "introduced": "4.2.0-alpha1"
                },
                {
                    "last_affected": "4.2.0-alpha1"
                }
            ],
            "vendor_product": "freeipa:freeipa"
        }
    ]
}
References

Affected packages

Git / github.com/freeipa/freeipa

Affected ranges

Type
GIT
Repo
https://github.com/freeipa/freeipa
Events
Introduced
218de5bff792f5ac40d9b3eebc22f19696e5091e
Last affected
3c542b987860322ca50cfd2e4eb8827b79071d9e
Database specific
Show details 
{
    "source": "CPE_STRING",
    "cpe": [
        "cpe:2.3:a:freeipa:freeipa:4.2.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:freeipa:freeipa:4.2.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:freeipa:freeipa:4.2.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:freeipa:freeipa:4.2.3:*:*:*:*:*:*:*",
        "cpe:2.3:a:freeipa:freeipa:4.2.4:*:*:*:*:*:*:*",
        "cpe:2.3:a:freeipa:freeipa:4.3.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:freeipa:freeipa:4.3.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:freeipa:freeipa:4.3.2:*:*:*:*:*:*:*",
        "cpe:2.3:a:freeipa:freeipa:4.4.0:*:*:*:*:*:*:*",
        "cpe:2.3:a:freeipa:freeipa:4.4.1:*:*:*:*:*:*:*",
        "cpe:2.3:a:freeipa:freeipa:4.4.2:*:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "4.2.0"
        },
        {
            "last_affected": "4.2.0"
        },
        {
            "introduced": "4.2.1"
        },
        {
            "last_affected": "4.2.1"
        },
        {
            "introduced": "4.2.2"
        },
        {
            "last_affected": "4.2.2"
        },
        {
            "introduced": "4.2.3"
        },
        {
            "last_affected": "4.2.3"
        },
        {
            "introduced": "4.2.4"
        },
        {
            "last_affected": "4.2.4"
        },
        {
            "introduced": "4.3.0"
        },
        {
            "last_affected": "4.3.0"
        },
        {
            "introduced": "4.3.1"
        },
        {
            "last_affected": "4.3.1"
        },
        {
            "introduced": "4.3.2"
        },
        {
            "last_affected": "4.3.2"
        },
        {
            "introduced": "4.4.0"
        },
        {
            "last_affected": "4.4.0"
        },
        {
            "introduced": "4.4.1"
        },
        {
            "last_affected": "4.4.1"
        },
        {
            "introduced": "4.4.2"
        },
        {
            "last_affected": "4.4.2"
        }
    ]
}

Affected versions

4.*
4.2.0
4.2.1
4.2.2
4.2.3
4.2.4
4.3.0
4.3.1
4.3.2
4.4.0
4.4.1
4.4.2
Other
alpha_1-4-4-0
release-4-2-0
release-4-4-0
release-4-4-1
release-4-4-2

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2016-9575.json"