{"id":"CVE-2017-2590","aliases":["EUVD-2017-11768","GHSA-7gp5-3wrx-x8j6","RHSA-2017:0388","UBUNTU-CVE-2017-2590"],"status":"published","title":"A vulnerability was found in ipa before 4.4. IdM's ca-del, ca-disable, and ca-enable commands did...","description":"A vulnerability was found in ipa before 4.4. IdM's ca-del, ca-disable, and ca-enable commands did not properly check the user's permissions while modifying CAs in Dogtag. An authenticated, unauthorized attacker could use this flaw to delete, disable, or enable CAs causing various denial of service problems with certificate issuance, OCSP signing, and deletion of secret keys.","severity":{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.01266,"percentile":0.69933,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-275","CWE-732"],"published":"2018-07-27T18:00:00Z","modified":"2026-10-24T10:30:15Z","fixes":[{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-client","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-client-common","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-common","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-debuginfo","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-python-compat","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"python2-ipaclient","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"python2-ipalib","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-admintools","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-server","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-server-common","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-server-dns","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-server-trust-ad","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::client","package":"python2-ipaserver","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-client","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-client-common","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-common","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-debuginfo","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-python-compat","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python2-ipaclient","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python2-ipalib","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-admintools","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-server","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-server-common","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-server-dns","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-server-trust-ad","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python2-ipaserver","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-admintools","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-client","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-client-common","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-common","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-debuginfo","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-python-compat","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-server","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-server-common","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-server-dns","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-server-trust-ad","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"python2-ipaclient","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"python2-ipalib","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::server","package":"python2-ipaserver","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-admintools","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-client","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-client-common","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-common","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-debuginfo","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-python-compat","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-server","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-server-common","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-server-dns","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-server-trust-ad","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python2-ipaclient","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python2-ipalib","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python2-ipaserver","fixed_in":["0:4.4.0-14.el7_3.6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-python-compat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python2-ipaclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python2-ipalib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-admintools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-server-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"python2-ipaserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-python-compat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python2-ipaclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python2-ipalib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-admintools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-server-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"python2-ipaserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-admintools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-python-compat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-server-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python2-ipaclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python2-ipalib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"python2-ipaserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-admintools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-client","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-client-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-python-compat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-server-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-server-dns","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"ipa-server-trust-ad","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python2-ipaclient","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python2-ipalib","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"python2-ipaserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.4.0-14.el7_3.6"}]}]}],"products":[{"vendor":"freeipa","product":"freeipa"},{"vendor":"red hat","product":"ipa"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_server_aus"},{"vendor":"redhat","product":"enterprise_linux_server_eus"},{"vendor":"redhat","product":"enterprise_linux_workstation"}],"references":[{"url":"http://www.securityfocus.com/bid/96557","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://rhn.redhat.com/errata/RHSA-2017-0388.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2590","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","fix"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-2590","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-7gp5-3wrx-x8j6"},{"url":"https://access.redhat.com/errata/RHSA-2017:0388","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1410760","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1413137","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1415158","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1416481","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1416488","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_0388.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2017-2590","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2017-2590","tags":["advisory","report"]},{"url":"https://ubuntu.com/security/CVE-2017-2590","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2017-2590","description":"A vulnerability was found in ipa before 4.4. IdM's ca-del, ca-disable, and ca-enable commands did not properly check the user's permissions while modifying CAs in Dogtag. An authenticated, unauthorized attacker could use this flaw to delete, disable, or enable CAs causing various denial of service problems with certificate issuance, OCSP signing, and deletion of secret keys.","status":"published","published":"2018-07-27T18:00:00Z","modified":"2024-08-05T14:02:06.518Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-732"],"updated_at":"2026-11-02T14:33:15.543086Z"}],"euvd":[{"id":"EUVD-2017-11768","description":"A vulnerability was found in ipa before 4.4. IdM's ca-del, ca-disable, and ca-enable commands did not properly check the user's permissions while modifying CAs in Dogtag. An authenticated, unauthorized attacker could use this flaw to delete, disable, or enable CAs causing various denial of service problems with certificate issuance, OCSP signing, and deletion of secret keys.","status":"published","published":"2018-07-27T18:00:00Z","modified":"2024-08-05T14:02:06Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T02:39:20.499267Z"}],"ghsa":[{"id":"GHSA-7gp5-3wrx-x8j6","title":"A vulnerability was found in ipa before 4.4. IdM's ca-del, ca-disable, and ca-enable commands did...","description":"A vulnerability was found in ipa before 4.4. IdM's ca-del, ca-disable, and ca-enable commands did not properly check the user's permissions while modifying CAs in Dogtag. An authenticated, unauthorized attacker could use this flaw to delete, disable, or enable CAs causing various denial of service problems with certificate issuance, OCSP signing, and deletion of secret keys.","status":"published","published":"2022-05-13T01:36:55Z","modified":"2023-02-01T05:09:03Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T14:50:54.417127Z"}],"nvd":[{"id":"CVE-2017-2590","description":"A vulnerability was found in ipa before 4.4. IdM's ca-del, ca-disable, and ca-enable commands did not properly check the user's permissions while modifying CAs in Dogtag. An authenticated, unauthorized attacker could use this flaw to delete, disable, or enable CAs causing various denial of service problems with certificate issuance, OCSP signing, and deletion of secret keys.","status":"published","published":"2018-07-27T18:29:00.627Z","modified":"2026-06-17T01:16:27.68Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5.5,"vector":"AV:N/AC:L/Au:S/C:N/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-732","CWE-275"],"updated_at":"2026-11-02T14:04:18.679411Z"}],"osv":[{"id":"CVE-2017-2590","description":"A vulnerability was found in ipa before 4.4. IdM's ca-del, ca-disable, and ca-enable commands did not properly check the user's permissions while modifying CAs in Dogtag. An authenticated, unauthorized attacker could use this flaw to delete, disable, or enable CAs causing various denial of service problems with certificate issuance, OCSP signing, and deletion of secret keys.","status":"published","published":"2018-07-27T18:29:00.627Z","modified":"2026-10-24T10:30:15.43216998Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:05.486486Z"},{"id":"RHSA-2017:0388","title":"Red Hat Security Advisory: ipa security and bug fix update","status":"published","published":"2024-09-16T00:04:05Z","modified":"2026-07-01T10:01:53Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:04.262457Z"},{"id":"UBUNTU-CVE-2017-2590","description":"A vulnerability was found in ipa before 4.4. IdM's ca-del, ca-disable, and ca-enable commands did not properly check the user's permissions while modifying CAs in Dogtag. An authenticated, unauthorized attacker could use this flaw to delete, disable, or enable CAs causing various denial of service problems with certificate issuance, OCSP signing, and deletion of secret keys.","status":"withdrawn","published":"2018-07-27T18:29:00Z","modified":"2025-07-16T07:18:19.858809Z","cvss":[{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high"},{"version":"3.0","score":8.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:14.977781Z"}]}}