CVE-2012-5484

CVE-2012-5484 describes a critical vulnerability in FreeIPA 2.x and 3.x before version 3.1.2, where the client fails to properly obtain the Certification Authority (CA) certificate from the server. This flaw enables man-in-the-middle attackers to spoof the join procedure using a crafted certificate, potentially compromising the integrity and confidentiality of the FreeIPA environment. With a CVSS score of 7.9, this vulnerability is considered highly severe due to its adjacent network attack vector, medium attack complexity, and complete compromise of confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.