2 matches found
CVE-2008-3274
The default configuration of Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1 places ldap:///anyone on the read ACL for the krbMKey attribute, which allows remote attackers to obtain the Kerberos master key via an anonymous LDAP query...
5CVSS6.4AI score0.01843EPSS
SaveExploits1References11
CVE-2008-3274: Exposure of Sensitive Information to an Unauthorized Actor
The default configuration of Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1 places ldap:///anyone on the read ACL for the krbMKey attribute, which allows remote attackers to obtain the Kerberos master key via an anonymous LDAP query...
5CVSS5.9AI score0.01843EPSS
SaveExploits1References2
20