description: ipa 3.0 does not properly check server identity before sending credential containing cookies
problem types: client does not properly check server identity before sending cookies that contain credentials
affected:
{
product: ipa
vendor: ipa
versions:
status: affected, version: Fixed in freeipa 3.0.2
status: affected, version: freeipa 3.1.0
}