VendorsRed Hatfreeipa3.0.2
Vulnerabilities

Red Hat FreeIPA 3.0.2

Ranked by severity, then by exploit likelihood, unless you sort otherwise. Click a CVE ID for its full record.

3CVEs
CVE-2012-5484
The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority (CA) certificate from the server, which allows man-in-the-middle attackers to spoof a join procedure via a crafted certificate.
Published 2013-01-27 · Modified
7.9EPSS 0.006
CVE-2013-0336
The ipapwd_chpwop function in daemons/ipa-slapi-plugins/ipa-pwd-extop/ipa_pwd_extop.c in the directory server (dirsrv) in FreeIPA before 3.2.0 allows remote attackers to cause a denial of service (crash) via a connection request without a username/dn, related to the 389 directory server.
Published 2014-11-03 · Modified
5.0EPSS 0.028
CVE-2013-0199
The default LDAP ACIs in FreeIPA 3.0 before 3.1.2 do not restrict access to the (1) ipaNTTrustAuthIncoming and (2) ipaNTTrustAuthOutgoing attributes, which allow remote attackers to obtain the Cross-Realm Kerberos Trust key via unspecified vectors.
Published 2014-05-29 · Modified
5.0EPSS 0.021