ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent...
Critical severity
Unreviewed
Published
May 17, 2022
to the GitHub Advisory Database
•
Updated Feb 3, 2023
Description
Published by the National Vulnerability Database
Sep 21, 2017
Published to the GitHub Advisory Database
May 17, 2022
Last updated
Feb 3, 2023
ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem, which is world readable.
References