CVE-2013-0199

The CVE-2013-0199 entry affects FreeIPA 3.0 before 3.1.2. The default LDAP ACIs fail to restrict access to ipaNTTrustAuthIncoming and ipaNTTrustAuthOutgoing, enabling remote attackers to obtain the Cross-Realm Kerberos Trust key via unspecified vectors. The vulnerability arises from overly permis...