[Secure-testing-team] Bug#835131: freeipa: CVE-2016-5404: Insufficient privileges check in certificate revocation

[Salvatore Bonaccorso]

Source: freeipa
Version: 4.0.5-6
Severity: grave
Tags: security upstream
Forwarded: https://fedorahosted.org/freeipa/ticket/6232



*** /tmp/freeipa.reportbug
Package: freeipa
Severity: FILLINSEVERITY
Tags: security

Hi,

the following vulnerability was published for freeipa.

CVE-2016-5404[0]:
insufficient permission check

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2016-5404
[1] https://fedorahosted.org/freeipa/ticket/6232

Regards,
Salvatore