Show filters
24 Total Results
Displaying 21-24 of 24
Sort by:
Attacker Value
Unknown
CVE-2013-0199
Disclosure Date: May 29, 2014 (last updated October 05, 2023)
The default LDAP ACIs in FreeIPA 3.0 before 3.1.2 do not restrict access to the (1) ipaNTTrustAuthIncoming and (2) ipaNTTrustAuthOutgoing attributes, which allow remote attackers to obtain the Cross-Realm Kerberos Trust key via unspecified vectors.
0
Attacker Value
Unknown
CVE-2012-5484
Disclosure Date: January 27, 2013 (last updated October 05, 2023)
The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority (CA) certificate from the server, which allows man-in-the-middle attackers to spoof a join procedure via a crafted certificate.
0
Attacker Value
Unknown
CVE-2011-3636
Disclosure Date: December 08, 2011 (last updated October 04, 2023)
Cross-site request forgery (CSRF) vulnerability in the management interface in FreeIPA before 2.1.4 allows remote attackers to hijack the authentication of administrators for requests that make configuration changes.
0
Attacker Value
Unknown
CVE-2008-3274
Disclosure Date: September 12, 2008 (last updated October 04, 2023)
The default configuration of Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1 places ldap:///anyone on the read ACL for the krbMKey attribute, which allows remote attackers to obtain the Kerberos master key via an anonymous LDAP query.
0
