{"id":"CVE-2012-4546","aliases":["EUVD-2012-4474","GHSA-f7qj-88hv-799m","RHSA-2013:0528"],"status":"published","title":"The default configuration for IPA servers in Red Hat Enterprise Linux 6, when revoking a...","description":"The default configuration for IPA servers in Red Hat Enterprise Linux 6, when revoking a certificate from an Identity Management replica, does not properly update another Identity Management replica, which causes inconsistent Certificate Revocation Lists (CRLs) to be used and might allow remote attackers to bypass intended access restrictions via a revoked certificate.","severity":{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01189,"percentile":0.68119,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-16"],"published":"2013-04-03T00:00:00Z","modified":"2026-06-26T12:21:43Z","fixes":[{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa","fixed_in":["0:3.0.0-25.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-admintools","fixed_in":["0:3.0.0-25.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-debuginfo","fixed_in":["0:3.0.0-25.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-server","fixed_in":["0:3.0.0-25.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-server-selinux","fixed_in":["0:3.0.0-25.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-server-trust-ad","fixed_in":["0:3.0.0-25.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-client","fixed_in":["0:3.0.0-25.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-python","fixed_in":["0:3.0.0-25.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa","fixed_in":["0:3.0.0-25.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-admintools","fixed_in":["0:3.0.0-25.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-debuginfo","fixed_in":["0:3.0.0-25.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-server","fixed_in":["0:3.0.0-25.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-server-selinux","fixed_in":["0:3.0.0-25.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-server-trust-ad","fixed_in":["0:3.0.0-25.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-client","fixed_in":["0:3.0.0-25.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-python","fixed_in":["0:3.0.0-25.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa","fixed_in":["0:3.0.0-25.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-admintools","fixed_in":["0:3.0.0-25.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-client","fixed_in":["0:3.0.0-25.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-debuginfo","fixed_in":["0:3.0.0-25.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-python","fixed_in":["0:3.0.0-25.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-server","fixed_in":["0:3.0.0-25.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-server-selinux","fixed_in":["0:3.0.0-25.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-server-trust-ad","fixed_in":["0:3.0.0-25.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa","fixed_in":["0:3.0.0-25.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-admintools","fixed_in":["0:3.0.0-25.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-client","fixed_in":["0:3.0.0-25.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-debuginfo","fixed_in":["0:3.0.0-25.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-python","fixed_in":["0:3.0.0-25.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-server","fixed_in":["0:3.0.0-25.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-server-selinux","fixed_in":["0:3.0.0-25.el6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-server-trust-ad","fixed_in":["0:3.0.0-25.el6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-25.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-admintools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-25.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-25.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-25.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-server-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-25.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-25.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-25.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-25.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-25.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-admintools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-25.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-25.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-25.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-server-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-25.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-25.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-25.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-25.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-25.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-admintools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-25.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-25.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-25.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-25.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-25.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-server-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-25.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-25.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-25.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-admintools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-25.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-25.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-25.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-25.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-25.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-server-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-25.el6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.0.0-25.el6"}]}]}],"products":[{"vendor":"redhat","product":"enterprise_linux"}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2013-0528.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-4546","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-f7qj-88hv-799m"},{"url":"https://access.redhat.com/errata/RHSA-2013:0528","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://access.redhat.com/knowledge/solutions/295843","tags":["article"]},{"url":"https://access.redhat.com/knowledge/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.4_Technical_Notes/ipa.html","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=748987","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=766095","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=767723","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=768510","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=773490","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=781208","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=782847","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=782981","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=783274","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=784378","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=784621","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=785251","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=785254","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=785257","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=786199","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=796390","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=798355","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=798363","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=798365","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=798493","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=801931","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=804619","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=805203","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=805233","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=805430","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=807018","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=809562","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=809565","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=811207","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=811211","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=811295","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=813325","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=813402","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=814785","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=815364","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=815481","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=815494","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=815830","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=815849","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=816574","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=816624","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=817075","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=817080","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=817407","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=817412","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=817413","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=817821","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=817831","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=817865","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=817869","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=817885","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=818665","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=818714","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=818836","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=819629","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=819635","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=820983","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=821448","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=822608","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=823657","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=824074","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=824488","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=824490","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=824492","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=826152","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=826677","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=827162","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=827321","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=827392","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=827583","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=828687","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=829070","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=829746","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=829899","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=830598","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=830817","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=831010","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=831227","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=831299","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=831313","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=831661","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=832243","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=833505","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=833515","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=833516","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=833517","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=835642","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=837357","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=837358","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=837365","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=837380","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=839008","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=839638","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=840657","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=845405","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=845691","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=846309","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=852480","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=854321","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=854325","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=855278","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=856282","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=856293","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=856294","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=859968","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=860683","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=864533","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=866572","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=866966","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=866977","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=866978","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=867447","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=867676","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=868956","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=869279","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=869616","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=869656","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=869658","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=869741","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=870053","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=870234","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=870446","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=872707","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=874935","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=875261","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=877324","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=877434","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=878288","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=878462","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=878480","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=878485","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=878969","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=880655","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=888124","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=888524","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=888915","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=888956","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=889583","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=891980","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=893187","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=893722","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=893827","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=894090","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=894131","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=894143","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=895298","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=895561","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=903758","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=905594","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0528.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-4546","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-4546","tags":["advisory"]},{"url":"http://www.freeipa.org/page/CVE-2012-4546","tags":["article"]}],"sources":{"cve":[{"id":"CVE-2012-4546","description":"The default configuration for IPA servers in Red Hat Enterprise Linux 6, when revoking a certificate from an Identity Management replica, does not properly update another Identity Management replica, which causes inconsistent Certificate Revocation Lists (CRLs) to be used and might allow remote attackers to bypass intended access restrictions via a revoked certificate.","status":"published","published":"2013-04-03T00:00:00Z","modified":"2024-08-06T20:42:54.934Z","updated_at":"2026-11-02T14:34:51.584538Z"}],"euvd":[{"id":"EUVD-2012-4474","description":"The default configuration for IPA servers in Red Hat Enterprise Linux 6, when revoking a certificate from an Identity Management replica, does not properly update another Identity Management replica, which causes inconsistent Certificate Revocation Lists (CRLs) to be used and might allow remote attackers to bypass intended access restrictions via a revoked certificate.","status":"published","published":"2013-04-03T00:00:00Z","modified":"2024-08-06T20:42:54Z","updated_at":"2026-11-03T01:56:07.373412Z"}],"ghsa":[{"id":"GHSA-f7qj-88hv-799m","title":"The default configuration for IPA servers in Red Hat Enterprise Linux 6, when revoking a...","description":"The default configuration for IPA servers in Red Hat Enterprise Linux 6, when revoking a certificate from an Identity Management replica, does not properly update another Identity Management replica, which causes inconsistent Certificate Revocation Lists (CRLs) to be used and might allow remote attackers to bypass intended access restrictions via a revoked certificate.","status":"published","published":"2022-05-14T01:08:01Z","modified":"2023-02-02T05:03:00Z","updated_at":"2026-11-02T14:51:33.40906Z"}],"nvd":[{"id":"CVE-2012-4546","description":"The default configuration for IPA servers in Red Hat Enterprise Linux 6, when revoking a certificate from an Identity Management replica, does not properly update another Identity Management replica, which causes inconsistent Certificate Revocation Lists (CRLs) to be used and might allow remote attackers to bypass intended access restrictions via a revoked certificate.","status":"published","published":"2013-04-03T00:55:01.233Z","modified":"2026-06-16T23:45:18.38Z","cvss":[{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-16"],"updated_at":"2026-11-02T14:02:17.375282Z"}],"osv":[{"id":"RHSA-2013:0528","title":"Red Hat Security Advisory: ipa security, bug fix and enhancement update","status":"published","published":"2024-09-15T20:17:21Z","modified":"2026-06-26T12:21:43.744977901Z","updated_at":"2026-11-02T15:53:01.993625Z"}]}}