| Package | Affected versions | Patched versions |
|---|---|---|
| freeipa | ≤ 4.2.1 |
ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem, which is world readable.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free