# CVE-2012-5484: PYSEC-2013-38 - The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority…

Source: https://junglewise.ai/threats/cve-2012-5484-pysec-2013-36-the-client-in-freeipa-2-x-and-3-x-before-3-1-2-does  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2013-01-27  
License: CC BY 4.0 with a link back

CVE-2012-5484 · Severity: info · Published 2013-01-27

The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority (CA) certificate from the server, which allows man-in-the-middle attackers to spoof a join procedure via a crafted certificate.

Technologies: [freeipa (PyPI)](https://junglewise.ai/threats/technologies/pypi-freeipa), [ipa (PyPI)](https://junglewise.ai/threats/technologies/ipa). Vendors: [PyPI](https://junglewise.ai/threats/vendors/pypi).

## Quick answers

**Is CVE-2012-5484 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2012-5484 being exploited in the wild.

**How severe is CVE-2012-5484?** Informational severity, published 27 January 2013.

**Which products and versions are affected?** freeipa (PyPI) GIT:introduced=0,fixed=91f4af7e6af53e1c6bf17ed36cb2161863eddae4,fixed=18eea90ebb24a9c22248f0b7e18646cc6e3e3e0f,fixed=a1991aeac19c3fec1fdd0d184c6760c90c9f9fc9,fixed=31e41eea6c2322689826e6065ceba82551c565aa,fixed=a40285c5a0288669b72f9d991508d4405885bffc|ECOSYSTEM:introduced=0; ipa (PyPI) GIT:introduced=0,fixed=91f4af7e6af53e1c6bf17ed36cb2161863eddae4,fixed=18eea90ebb24a9c22248f0b7e18646cc6e3e3e0f,fixed=a1991aeac19c3fec1fdd0d184c6760c90c9f9fc9,fixed=31e41eea6c2322689826e6065ceba82551c565aa,fixed=a40285c5a0288669b72f9d991508d4405885bffc|ECOSYSTEM:introduced=0.

**Is there a fix for CVE-2012-5484?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2012-5484?** Check whether you run freeipa (PyPI) or ipa (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- freeipa (PyPI) GIT:introduced=0,fixed=91f4af7e6af53e1c6bf17ed36cb2161863eddae4,fixed=18eea90ebb24a9c22248f0b7e18646cc6e3e3e0f,fixed=a1991aeac19c3fec1fdd0d184c6760c90c9f9fc9,fixed=31e41eea6c2322689826e6065ceba82551c565aa,fixed=a40285c5a0288669b72f9d991508d4405885bffc|ECOSYSTEM:introduced=0
- ipa (PyPI) GIT:introduced=0,fixed=91f4af7e6af53e1c6bf17ed36cb2161863eddae4,fixed=18eea90ebb24a9c22248f0b7e18646cc6e3e3e0f,fixed=a1991aeac19c3fec1fdd0d184c6760c90c9f9fc9,fixed=31e41eea6c2322689826e6065ceba82551c565aa,fixed=a40285c5a0288669b72f9d991508d4405885bffc|ECOSYSTEM:introduced=0

## Identifiers

- CVE-2012-5484
- PYSEC-2013-36
- PYSEC-2013-38

## Related threats

- [PYSEC-2026-636 - Code injection in FreeIPA](https://junglewise.ai/threats/cve-2019-14867-code-injection-in-freeipa)
- [PYSEC-2019-98 - A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all…](https://junglewise.ai/threats/pysec-2019-98-a-flaw-was-found-in-ipa-all-4-6-x-versions-before-4-6-7-da647549)
- [PYSEC-2019-92 - A flaw was found in IPA, all 4.6.x versions before 4.6.7, all 4.7.x versions before 4.7.4 and all…](https://junglewise.ai/threats/pysec-2019-92-a-flaw-was-found-in-ipa-all-4-6-x-versions-before-4-6-7-0af84da9)
- [FreeIPA logs passwords embedded in commands in calls using batch](https://junglewise.ai/threats/cve-2019-10195-freeipa-logs-passwords-embedded-in-commands-in-calls-using-batch)
- [PYSEC-2014-101 - FreeIPA 4.0.x before 4.0.5 and 4.1.x before 4.1.1, when 2FA is enabled, allows remote attackers to…](https://junglewise.ai/threats/pysec-2014-101-freeipa-4-0-x-before-4-0-5-and-4-1-x-before-4-1-1-when-4a576ba6)