{"id":"CVE-2011-3636","aliases":["EUVD-2011-3595","GHSA-62x7-6pjw-j8fh","RHSA-2011:1533"],"status":"published","title":"Cross-site request forgery (CSRF) vulnerability in the management interface in FreeIPA before 2.1...","description":"Cross-site request forgery (CSRF) vulnerability in the management interface in FreeIPA before 2.1.4 allows remote attackers to hijack the authentication of administrators for requests that make configuration changes.","severity":{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00812,"percentile":0.57233,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-352"],"published":"2011-12-08T11:00:00Z","modified":"2026-06-26T12:21:40Z","fixes":[{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa","fixed_in":["0:2.1.3-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-admintools","fixed_in":["0:2.1.3-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-debuginfo","fixed_in":["0:2.1.3-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-server","fixed_in":["0:2.1.3-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-server-selinux","fixed_in":["0:2.1.3-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-client","fixed_in":["0:2.1.3-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-python","fixed_in":["0:2.1.3-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa","fixed_in":["0:2.1.3-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-admintools","fixed_in":["0:2.1.3-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-debuginfo","fixed_in":["0:2.1.3-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-server","fixed_in":["0:2.1.3-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-server-selinux","fixed_in":["0:2.1.3-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-client","fixed_in":["0:2.1.3-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-python","fixed_in":["0:2.1.3-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa","fixed_in":["0:2.1.3-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-admintools","fixed_in":["0:2.1.3-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-client","fixed_in":["0:2.1.3-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-debuginfo","fixed_in":["0:2.1.3-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-python","fixed_in":["0:2.1.3-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-server","fixed_in":["0:2.1.3-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-server-selinux","fixed_in":["0:2.1.3-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa","fixed_in":["0:2.1.3-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-admintools","fixed_in":["0:2.1.3-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-client","fixed_in":["0:2.1.3-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-debuginfo","fixed_in":["0:2.1.3-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-python","fixed_in":["0:2.1.3-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-server","fixed_in":["0:2.1.3-9.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-server-selinux","fixed_in":["0:2.1.3-9.el6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-admintools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-server-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-admintools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-server-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-admintools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-server-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-admintools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-9.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-server-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-9.el6"}]}]}],"products":[{"vendor":"redhat","product":"freeipa"}],"references":[{"url":"http://freeipa.org/page/IPAv2_214","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2011-3636","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2011:1533","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2011-3636","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=747710","tags":["report"]},{"url":"https://github.com/advisories/GHSA-62x7-6pjw-j8fh"},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.2_Technical_Notes/ipa.html#RHBA-2011-1533","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=680504","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=681978","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=681979","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=688925","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=689023","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=689810","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=690185","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=690473","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=692144","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=692950","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=693464","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=693483","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=693766","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=693771","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=696193","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=696268","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=696282","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=697009","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=697878","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=698219","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=698421","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=700586","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=701325","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=703188","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=703869","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=704012","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=705794","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=705800","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=707001","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=707009","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=707133","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=707229","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=707312","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=708294","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=709645","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=709665","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=710240","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=710245","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=710253","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=710494","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=710530","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=710592","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=710598","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=710601","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=711667","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=711671","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=711761","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=711786","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=712889","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=713069","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=713374","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=713380","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=713385","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=713481","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=713501","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=713531","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=713549","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=713603","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=713798","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=714238","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=714597","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=714600","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=714919","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=714924","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=715112","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=716287","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=716432","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=716462","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=717020","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=717625","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=717724","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=717726","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=717729","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=717732","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=717965","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=718062","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=719656","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=720011","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=720013","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=720336","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=720711","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=722228","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=722468","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=723027","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=723233","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=723241","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=723622","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=723624","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=723778","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=723781","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=723882","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=723969","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=723990","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=724036","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=725433","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=725763","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=726028","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=726123","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=726454","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=726526","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=726715","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=726722","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=726725","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=726751","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=726943","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=727282","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=727691","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=727921","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=728118","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=728614","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=728950","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=729089","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=729166","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=729245","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=729246","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=729377","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=729665","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=730436","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=730713","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=730751","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=731784","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=731804","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=731805","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=732084","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=732088","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=732468","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=732521","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=732803","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=732996","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=733009","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=733436","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=734013","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=734706","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=734725","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=735187","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=736276","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=736455","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=736617","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=736684","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=736787","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=737048","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=737516","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=737581","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=737994","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=737997","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=738038","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=738053","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=738339","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=738693","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=739040","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=739060","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=739061","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=739089","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=739195","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=739604","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=739640","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=739650","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=740320","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=740830","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=740838","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=740844","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=740850","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=740854","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=740879","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=740880","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=740885","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=740891","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=741050","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=741277","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=741677","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=741808","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=742024","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=742327","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=742616","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=742875","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=743253","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=743295","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=743788","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=743936","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=743955","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=744024","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=744074","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=744101","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=744234","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=744264","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=744306","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=744410","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=744422","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=744798","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=745392","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=745575","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=745698","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=745957","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=746056","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=746199","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=746227","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=746229","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=746276","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=746298","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=746717","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=747028","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=747443","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=748754","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=749352","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=751179","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2011/rhsa-2011_1533.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2011-3636","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2011-3636","description":"Cross-site request forgery (CSRF) vulnerability in the management interface in FreeIPA before 2.1.4 allows remote attackers to hijack the authentication of administrators for requests that make configuration changes.","status":"published","published":"2011-12-08T11:00:00Z","modified":"2024-08-06T23:37:48.685Z","updated_at":"2026-11-02T14:35:37.324501Z"}],"euvd":[{"id":"EUVD-2011-3595","description":"Cross-site request forgery (CSRF) vulnerability in the management interface in FreeIPA before 2.1.4 allows remote attackers to hijack the authentication of administrators for requests that make configuration changes.","status":"published","published":"2011-12-08T11:00:00Z","modified":"2024-08-06T23:37:48Z","updated_at":"2026-11-03T01:39:50.860626Z"}],"ghsa":[{"id":"GHSA-62x7-6pjw-j8fh","title":"Cross-site request forgery (CSRF) vulnerability in the management interface in FreeIPA before 2.1...","description":"Cross-site request forgery (CSRF) vulnerability in the management interface in FreeIPA before 2.1.4 allows remote attackers to hijack the authentication of administrators for requests that make configuration changes.","status":"published","published":"2022-05-17T05:32:37Z","modified":"2023-02-02T15:30:35Z","cwes":["CWE-352"],"updated_at":"2026-11-02T14:52:46.933473Z"}],"nvd":[{"id":"CVE-2011-3636","description":"Cross-site request forgery (CSRF) vulnerability in the management interface in FreeIPA before 2.1.4 allows remote attackers to hijack the authentication of administrators for requests that make configuration changes.","status":"published","published":"2011-12-08T11:55:01.827Z","modified":"2026-06-16T23:33:40.05Z","cvss":[{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:02:11.800512Z"}],"osv":[{"id":"RHSA-2011:1533","title":"Red Hat Security Advisory: ipa security and bug fix update","status":"published","published":"2024-09-15T19:22:17Z","modified":"2026-06-26T12:21:40.087761635Z","updated_at":"2026-11-02T15:53:01.495018Z"}]}}