Security Advisory
CVE-2016-5404
6.5
MEDIUM
Vulnerability Description
The cert_revoke command in FreeIPA does not check for the "revoke certificate" permission, which allows remote authenticated users to revoke arbitrary certificates by leveraging the "retrieve certificate" permission.
Published Date
September 7, 2016
Official Source
NIST NVD Advisory