Freeipa (Redhat) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 38 known versions, newest CVE from 2014-11-03. Vendor: Redhat.

CVEs of Freeipa

• CVE-2013-0336 - CVSS 5 (medium), 2014-11-03: The ipapwd_chpwop function in daemons/ipa-slapi-plugins/ipa-pwd-extop/ipa_pwd_extop.c in the directory server (dirsrv) in FreeIPA before 3.2.0 allows remote…
• CVE-2013-0199 - CVSS 5 (medium), 2014-05-29: The default LDAP ACIs in FreeIPA 3.0 before 3.1.2 do not restrict access to the (1) ipaNTTrustAuthIncoming and (2) ipaNTTrustAuthOutgoing attributes, which…
• CVE-2012-5484 - CVSS 7.9 (high), 2013-01-27: The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority (CA) certificate from the server, which allows…
• CVE-2011-3636 - CVSS 6.8 (medium), 2011-12-08: Cross-site request forgery (CSRF) vulnerability in the management interface in FreeIPA before 2.1.4 allows remote attackers to hijack the authentication of…
• CVE-2008-3274 - CVSS 5 (medium), 2008-09-12: The default configuration of Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1 places ldap:///anyone on the read ACL for the krbMKey attribute, which…