Loading vulnerability details…
CVSS v3.1
N/A
EPSS
2.58%
Published
Sep 7, 2016
Modified
May 6, 2026
Public PoC / Exploit (1)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
The cert_revoke command in FreeIPA does not check for the "revoke certificate" permission, which allows remote authenticated users to revoke arbitrary certificates by leveraging the "retrieve certificate" permission.
Weaknesses (CWE)
Affected Products (6)
References (18)