NetSight
high8.8

CVE-2012-5631

ipa 3.0 does not properly check server identity before sending credential containing cookies

Impact

ipa 3.0 does not properly check server identity before sending credential containing cookies

Affected products

VendorProductAffected versions
FreeipaFreeipa
Version 3.0.0

Weakness classification

References