Unrated severityNVD Advisory· Published Dec 8, 2011· Updated Jun 16, 2026
CVE-2011-3636
CVE-2011-3636
Description
Cross-site request forgery (CSRF) vulnerability in the management interface in FreeIPA before 2.1.4 allows remote attackers to hijack the authentication of administrators for requests that make configuration changes.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
28cpe:2.3:a:redhat:freeipa:*:*:*:*:*:*:*:*+ 26 more
- cpe:2.3:a:redhat:freeipa:*:*:*:*:*:*:*:*range: <=2.1.3
- cpe:2.3:a:redhat:freeipa:0.99:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:freeipa:0.99698-20080228:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:freeipa:0.99698641-20080218:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:freeipa:1.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:freeipa:1.0.0:a:*:*:*:*:*:*
- cpe:2.3:a:redhat:freeipa:1.0.0:b:*:*:*:*:*:*
- cpe:2.3:a:redhat:freeipa:1.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:freeipa:1.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:freeipa:1.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:freeipa:1.2.1:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:freeipa:1.2.2:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:freeipa:1.9.0:pre1:*:*:*:*:*:*
- cpe:2.3:a:redhat:freeipa:1.9.0:pre2:*:*:*:*:*:*
- cpe:2.3:a:redhat:freeipa:1.9.0:pre3:*:*:*:*:*:*
- cpe:2.3:a:redhat:freeipa:1.9.0:pre4:*:*:*:*:*:*
- cpe:2.3:a:redhat:freeipa:1.9.0:pre5:*:*:*:*:*:*
- cpe:2.3:a:redhat:freeipa:2.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:freeipa:2.0.0:pre1:*:*:*:*:*:*
- cpe:2.3:a:redhat:freeipa:2.0.0:pre2:*:*:*:*:*:*
- cpe:2.3:a:redhat:freeipa:2.0.0:rc1:*:*:*:*:*:*
- cpe:2.3:a:redhat:freeipa:2.0.0:rc2:*:*:*:*:*:*
- cpe:2.3:a:redhat:freeipa:2.0.0:rc3:*:*:*:*:*:*
- cpe:2.3:a:redhat:freeipa:2.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:freeipa:2.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:freeipa:2.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:freeipa:2.1.2:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.