CVE-2011-3636

MEDIUM 6.8CVE-2011-3636 · Published 08/12/2011 · updated 16/06/2026

In short

CVE-2011-3636 is a MEDIUM (CVSS 6.8) vulnerability affecting freeipa (redhat).
Chance of exploitation in the next 30 days (EPSS): 0.81%, higher than 57.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
freeipa redhat	`= 0.99= 0.99698-20080228= 0.99698641-20080218= 1.0.0= 1.1.0= 1.1.1= 1.2.0= 1.2.1= 1.2.2= 1.9.0= 2.0.0= 2.0.1= 2.1.0= 2.1.1= 2.1.2≤ 2.1.3`	No fix yet

Description

Cross-site request forgery (CSRF) vulnerability in the management interface in FreeIPA before 2.1.4 allows remote attackers to hijack the authentication of administrators for requests that make configuration changes.

References

freeipa.org/page/IPAv2_214

More vulnerabilities in freeipa

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free