World Readable CA Agent Certificate and Private Key in FreeIPA

World Readable CA Agent Certificate and Private Key in FreeIPA

CVE-2015-5284 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem, which is world readable.

Learn more about our Web Application Penetration Testing UK.