Approved changes feed: RSS · Atom

cpe:2.3:a:redhat:freeipa:2.1.0:*:*:*:*:*:*:*

part: a version: 2.1.0 update: *

VendorRedhat (e942785a-ca89-506e-bd99-50782639cde3)
ProductFreeipa (dbb7eae9-86f5-5b45-b6a2-2309cd35e119)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/freeipa purl2cpe 2026-06-01 10:12:55.712403
pkg:deb/ubuntu/freeipa purl2cpe 2026-06-01 10:12:55.712404
pkg:docker/centos/freeipa purl2cpe 2026-06-01 10:12:55.712406
pkg:github/freeipa/freeipa purl2cpe 2026-06-01 10:12:55.712407
pkg:gitlab/redhat/freeipa purl2cpe 2026-06-01 10:12:55.712408
pkg:rpm/fedora/freeipa purl2cpe 2026-06-01 10:12:55.712410

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-5484 vulnerable 2026-06-08 05:02:56.674981 Details available
The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority (CA) certificate from the server, which allows man-in-the-middle attackers to spoof a join procedure via a crafted certificate.
Published: 2013-01-27T18:00:00.000Z
Updated: 2024-08-06T21:05:47.243Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3636 vulnerable 2026-06-08 04:59:26.896665 Details available
Cross-site request forgery (CSRF) vulnerability in the management interface in FreeIPA before 2.1.4 allows remote attackers to hijack the authentication of administrators for requests that make configuration changes.
Published: 2011-12-08T11:00:00.000Z
Updated: 2024-08-06T23:37:48.685Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.