{"id":"CVE-2012-5484","aliases":["EUVD-2013-0010","GHSA-6rr4-9qrg-g6j5","PYSEC-2013-36","PYSEC-2013-38","RHSA-2013:0188","RHSA-2013:0189"],"status":"published","title":"The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification...","description":"The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority (CA) certificate from the server, which allows man-in-the-middle attackers to spoof a join procedure via a crafted certificate.","severity":{"version":"2.0","score":7.9,"vector":"AV:A/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00611,"percentile":0.49551,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-310"],"published":"2013-01-27T18:00:00Z","modified":"2026-06-26T12:21:43Z","fixes":[{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa","fixed_in":["0:2.2.0-17.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-client","fixed_in":["0:2.2.0-17.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-debuginfo","fixed_in":["0:2.2.0-17.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-python","fixed_in":["0:2.2.0-17.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-admintools","fixed_in":["0:2.2.0-17.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-server","fixed_in":["0:2.2.0-17.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-server-selinux","fixed_in":["0:2.2.0-17.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa","fixed_in":["0:2.2.0-17.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-client","fixed_in":["0:2.2.0-17.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-debuginfo","fixed_in":["0:2.2.0-17.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-python","fixed_in":["0:2.2.0-17.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-admintools","fixed_in":["0:2.2.0-17.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-server","fixed_in":["0:2.2.0-17.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-server-selinux","fixed_in":["0:2.2.0-17.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa","fixed_in":["0:2.2.0-17.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-admintools","fixed_in":["0:2.2.0-17.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-client","fixed_in":["0:2.2.0-17.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-debuginfo","fixed_in":["0:2.2.0-17.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-python","fixed_in":["0:2.2.0-17.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-server","fixed_in":["0:2.2.0-17.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-server-selinux","fixed_in":["0:2.2.0-17.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa","fixed_in":["0:2.2.0-17.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-admintools","fixed_in":["0:2.2.0-17.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-client","fixed_in":["0:2.2.0-17.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-debuginfo","fixed_in":["0:2.2.0-17.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-python","fixed_in":["0:2.2.0-17.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-server","fixed_in":["0:2.2.0-17.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-server-selinux","fixed_in":["0:2.2.0-17.el6_3.1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"ipa-client","fixed_in":["0:2.1.3-5.el5_9.2"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:5::server","package":"ipa-client-debuginfo","fixed_in":["0:2.1.3-5.el5_9.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-17.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-17.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-17.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-17.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-admintools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-17.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-17.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::client","package":"ipa-server-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-17.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-17.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-17.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-17.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-17.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-admintools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-17.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-17.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::computenode","package":"ipa-server-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-17.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-17.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-admintools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-17.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-17.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-17.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-17.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-17.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::server","package":"ipa-server-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-17.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-17.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-admintools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-17.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-17.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-17.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-17.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-17.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:6::workstation","package":"ipa-server-selinux","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.0-17.el6_3.1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-5.el5_9.2"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:5::server","package":"ipa-client-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.1.3-5.el5_9.2"}]}]}],"products":[{"vendor":"redhat","product":"freeipa"}],"references":[{"url":"http://git.fedorahosted.org/cgit/freeipa.git/commit/?id=31e41eea6c2322689826e6065ceba82551c565aa","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.freeipa.org/page/CVE-2012-5484","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory","article"]},{"url":"http://www.freeipa.org/page/Releases/3.1.2","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://git.fedorahosted.org/cgit/freeipa.git/commit/?id=a1991aeac19c3fec1fdd0d184c6760c90c9f9fc9","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://git.fedorahosted.org/cgit/freeipa.git/commit/?id=18eea90ebb24a9c22248f0b7e18646cc6e3e3e0f","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0188.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"http://git.fedorahosted.org/cgit/freeipa.git/commit/?id=91f4af7e6af53e1c6bf17ed36cb2161863eddae4","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://git.fedorahosted.org/cgit/freeipa.git/commit/?id=a40285c5a0288669b72f9d991508d4405885bffc","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://rhn.redhat.com/errata/RHSA-2013-0189.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-5484","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-6rr4-9qrg-g6j5"},{"url":"https://access.redhat.com/errata/RHSA-2013:0188","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=876307","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0188.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2012-5484","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-5484","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2013:0189","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2013/rhsa-2013_0189.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2012-5484","description":"The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority (CA) certificate from the server, which allows man-in-the-middle attackers to spoof a join procedure via a crafted certificate.","status":"published","published":"2013-01-27T18:00:00Z","modified":"2024-08-06T21:05:47.243Z","updated_at":"2026-11-02T14:34:49.600255Z"}],"euvd":[{"id":"EUVD-2013-0010","description":"The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority (CA) certificate from the server, which allows man-in-the-middle attackers to spoof a join procedure via a crafted certificate.","status":"published","published":"2013-01-27T18:00:00Z","modified":"2024-08-06T21:05:47Z","updated_at":"2026-11-03T01:56:04.46975Z"}],"ghsa":[{"id":"GHSA-6rr4-9qrg-g6j5","title":"The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification...","description":"The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority (CA) certificate from the server, which allows man-in-the-middle attackers to spoof a join procedure via a crafted certificate.","status":"published","published":"2022-05-17T05:15:19Z","modified":"2023-01-28T05:03:26Z","updated_at":"2026-11-02T14:43:58.944932Z"}],"nvd":[{"id":"CVE-2012-5484","description":"The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority (CA) certificate from the server, which allows man-in-the-middle attackers to spoof a join procedure via a crafted certificate.","status":"published","published":"2013-01-27T18:55:02.07Z","modified":"2026-06-16T23:46:51.85Z","cvss":[{"version":"2.0","score":7.9,"vector":"AV:A/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-310"],"updated_at":"2026-11-02T14:02:16.958223Z"}],"osv":[{"id":"PYSEC-2013-36","description":"The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority (CA) certificate from the server, which allows man-in-the-middle attackers to spoof a join procedure via a crafted certificate.","status":"withdrawn","published":"2013-01-27T18:55:00Z","modified":"2026-02-22T22:48:50.941977Z","updated_at":"2026-11-02T15:52:51.645172Z"},{"id":"PYSEC-2013-38","description":"The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority (CA) certificate from the server, which allows man-in-the-middle attackers to spoof a join procedure via a crafted certificate.","status":"withdrawn","published":"2013-01-27T18:55:00Z","modified":"2026-02-22T22:48:58.11584Z","updated_at":"2026-11-02T15:52:51.645172Z"},{"id":"RHSA-2013:0188","title":"Red Hat Security Advisory: ipa security update","status":"published","published":"2024-09-15T20:28:04Z","modified":"2026-06-26T12:21:43.583492724Z","updated_at":"2026-11-02T15:53:01.495018Z"},{"id":"RHSA-2013:0189","title":"Red Hat Security Advisory: ipa-client security update","status":"published","published":"2024-09-15T20:28:08Z","modified":"2025-11-22T10:41:12Z","updated_at":"2026-11-02T15:53:01.495018Z"}]}}