← Back

CVE-2011-3636

nvd nist
Published: Dec 8, 2011Modified: Apr 29, 2026

JSON object

Loading...
6.8
Vector
AV:N/AC:M/Au:N/C:P/I:P/A:P
Exploitability: 8.6 / Impact: 6.4
Source: NVD

Description

Cross-site request forgery (CSRF) vulnerability in the management interface in FreeIPA before 2.1.4 allows remote attackers to hijack the authentication of administrators for requests that make configuration changes.

Affected (27)

Products: Redhat: Freeipa
Redhat
1 product
Freeipa
Configuration A
27 vulnerable
Vulnerable SoftwareAffected Versions
Redhat
Freeipa
Up to 2.1.3
Freeipa
Version 0.99698-20080228
Freeipa
Version 0.99698641-20080218
Freeipa
Version 0.99
Freeipa
Version 1.0.0
Freeipa
Version 1.0.0 a
Freeipa
Version 1.0.0 b
Freeipa
Version 1.1.0
Freeipa
Version 1.1.1
Freeipa
Version 1.2.0
Freeipa
Version 1.2.1
Freeipa
Version 1.2.2
Freeipa
Version 1.9.0 pre1
Freeipa
Version 1.9.0 pre2
Freeipa
Version 1.9.0 pre3
Freeipa
Version 1.9.0 pre4
Freeipa
Version 1.9.0 pre5
Freeipa
Version 2.0.0
Freeipa
Version 2.0.0 pre1
Freeipa
Version 2.0.0 pre2
Freeipa
Version 2.0.0 rc1
Freeipa
Version 2.0.0 rc2
Freeipa
Version 2.0.0 rc3
Freeipa
Version 2.0.1
Freeipa
Version 2.1.0
Freeipa
Version 2.1.1
Freeipa
Version 2.1.2

Related CWEs

CWE-352
Cross-Site Request Forgery (CSRF)
The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (2)

Source: secalert@redhat.com
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.