VendorsRed Hatfreeipa1.0.0
Vulnerabilities

Red Hat FreeIPA 1.0.0

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

2CVEs
CVE-2011-3636
Cross-site request forgery (CSRF) vulnerability in the management interface in FreeIPA before 2.1.4 allows remote attackers to hijack the authentication of administrators for requests that make configuration changes.
Published 2011-12-08 · Modified
6.8EPSS 0.008
CVE-2008-3274
The default configuration of Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1 places ldap:///anyone on the read ACL for the krbMKey attribute, which allows remote attackers to obtain the Kerberos master key via an anonymous LDAP query.
Published 2008-09-12 · Modified
5.0EPSS 0.018