VULNERABILITY INTELLIGENCE

CVE-2011-3636

CVSS score6.8 MEDIUM

EPSS probability0.81%

CISA KEVNot currently listed

Published2011-12-08

Last modified2026-06-16

Description

Cross-site request forgery (CSRF) vulnerability in the management interface in FreeIPA before 2.1.4 allows remote attackers to hijack the authentication of administrators for requests that make configuration changes.