CVE-2017-2590
ipa: Insufficient permission check for ca-del, ca-disable and ca-enable commands
Severity
ModerateRed Hat Product Security
CVSS 3.0
Review impact separately from score.
Published · February 27, 2017
Updated · June 30, 2026
Description
It was found that IdM's ca-del, ca-disable, and ca-enable commands did not properly check the user's permissions while modifying CAs in Dogtag. An authenticated, unauthorized attacker could use this flaw to delete, disable, or enable CAs causing various denial of service problems with certificate issuance, OCSP signing, and deletion of secret keys.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.0 · 8.1CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CWE-732 · Incorrect Permission Assignment for Critical Resource