High
Security advisory
A vulnerability was found in ipa before 4.4. IdM's ca-del, ca-disable, and ca-enable commands did not properly check the user's permissions while modifying CAs in Dogtag. An authenticated, unauthorized attacker could use this flaw to delete, disable, or enable CAs causing various denial of service problems with certificate issuance, OCSP signing, and deletion of secret keys.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2017-2590
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 1 Nov 2026, 04:13 UTC · Revision 1
Source evidence
A vulnerability was found in ipa before 4.4. IdM's ca-del, ca-disable, and ca-enable commands did not properly check the user's permissions while modifying CAs in Dogtag. An authenticated, unauthorized attacker could use this flaw to delete, disable, or enable CAs causing various denial of service problems with certificate issuance, OCSP signing, and deletion of secret keys.
osv:CVE-2017-2590
Complete source record
{
"id": "13c9a76640ad822cde9453d717d8af9e49b207a42123f4509a6479a9ce1cf94a",
"url": "https://osv.dev/vulnerability/CVE-2017-2590",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "CVE-2017-2590",
"summary": "A vulnerability was found in ipa before 4.4. IdM's ca-del, ca-disable, and ca-enable commands did not properly check the user's permissions while modifying CAs in Dogtag. An authenticated, unauthorized attacker could use this flaw to delete, disable, or enable CAs causing various denial of service problems with certificate issuance, OCSP signing, and deletion of secret keys.",
"evidence": "osv:CVE-2017-2590",
"products": [],
"severity": "high",
"structured": {
"id": "CVE-2017-2590",
"aliases": [
"CVE-2017-2590"
],
"metrics": [
{
"type": "CVSS_V3",
"score": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/freeipa/freeipa",
"type": "GIT",
"events": [
{
"introduced": "0"
},
{
"fixed": "4c1d737656f117a85845fdcd49cbe71459d392e7"
}
],
"database_specific": {
"extracted_events": [
{
"cpe": "cpe:2.3:a:freeipa:freeipa:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"fixed": "4.4.0"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"alpha_1-4-4-0",
"release-4-2-0",
"alpha_1-4-2-0",
"release-4-0-0",
"release-3-3-0",
"beta_2-3-3-0",
"beta_1-3-3-0",
"release-3-2-0",
"beta_1-3-2-0",
"release-3-2-0-pre1",
"release-3-1-0",
"beta_2-3-0-0",
"beta_1-3-0-0",
"release-2-1-0",
"release-2-0-0",
"rc_3-2-0-0",
"rc_2-2-0-0",
"rc_1-2-0-0",
"beta_1-2-0-0",
"alpha_5-1-9-0-1",
"alpha_5-1-9-0",
"alpha_4-1-9-0",
"alpha_3-1-9-0",
"alpha_2-1-9-0",
"alpha-1-9-0",
"release-1-1-0",
"release-1-0-0",
"milestone_6",
"milestone_4_1",
"milestone_4",
"milestone_3",
"milestone_2"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2017-2590.json"
}
}
],
"modified": "2026-10-24T10:30:15.432169980Z",
"provider": "osv",
"references": [
"https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-2590"
],
"provider_metadata": {
"unresolved_ranges": [
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux",
"extracted_events": [
{
"range": [
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_desktop",
"extracted_events": [
{
"range": [
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_server",
"extracted_events": [
{
"range": [
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_server_aus",
"extracted_events": [
{
"range": [
{
"introduced": "7.3"
},
{
"last_affected": "7.3"
},
{
"introduced": "7.4"
},
{
"last_affected": "7.4"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.3:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.4:*:*:*:*:*:*:*",
"cpe:2.3:o:redhat:enterprise_linux_server_eus:7.5:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_server_eus",
"extracted_events": [
{
"range": [
{
"introduced": "7.3"
},
{
"last_affected": "7.3"
},
{
"introduced": "7.4"
},
{
"last_affected": "7.4"
},
{
"introduced": "7.5"
},
{
"last_affected": "7.5"
}
],
"source": "CPE_STRING"
}
]
},
{
"cpes": [
"cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:*:*:*:*:*:*:*"
],
"vendor_product": "redhat:enterprise_linux_workstation",
"extracted_events": [
{
"range": [
{
"introduced": "7.0"
},
{
"last_affected": "7.0"
}
],
"source": "CPE_STRING"
}
]
}
]
}
},
"related_cves": [
{
"value": "CVE-2017-2590",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 429142,
"published_at": "2018-07-27T18:29:00.627+00:00"
}