Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

ipa: cross-site request forgery

Package(s):

ipa

CVE #(s):

CVE-2011-3636

Created:

December 7, 2011

Updated:

January 11, 2012

Description:

A CSRF vulnerability in ipa can allow an attacker to perform Red Hat identity management configuration changes with the privileges of a logged-in user.

Alerts:

Red Hat	RHSA-2011:1533-04	2011-12-06
Scientific Linux	SL-ipa-20111206	2011-12-06

(Log in to post comments)