[{"CVE":"CVE-2012-5484","severity":"important","public_date":"2013-01-23T00:00:00Z","advisories":["RHSA-2013:0188","RHSA-2013:0189"],"bugzilla":"876307","bugzilla_description":"CVE-2012-5484 ipa: weakness when initiating join from IPA client can potentially compromise IPA domain","cvss_score":6.8,"cvss_scoring_vector":"AV:A/AC:H/Au:N/C:C/I:C/A:C","CWE":null,"affected_packages":["ipa-client-0:2.1.3-5.el5_9.2","ipa-0:2.2.0-17.el6_3.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5484.json"},{"CVE":"CVE-2012-5631","severity":"moderate","public_date":"2012-11-05T00:00:00Z","advisories":[],"bugzilla":"886369","bugzilla_description":"CVE-2012-5631 ipa: client does not properly check server identity before sending cookies that contain credentials","cvss_score":4.3,"cvss_scoring_vector":"AV:A/AC:M/Au:N/C:P/I:P/A:N","CWE":null,"affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-5631.json"}]