VULNERABILITY INTELLIGENCE

CVE-2017-2590

CVSS score8.1 HIGH
EPSS probability1.27%
CISA KEVNot currently listed
Published2018-07-27
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Description

A vulnerability was found in ipa before 4.4. IdM's ca-del, ca-disable, and ca-enable commands did not properly check the user's permissions while modifying CAs in Dogtag. An authenticated, unauthorized attacker could use this flaw to delete, disable, or enable CAs causing various denial of service problems with certificate issuance, OCSP signing, and deletion of secret keys.

Weakness classification

  • CWE-732: Incorrect Permission Assignment for Critical Resource

Primary references