PT-2014-2433

Name of the Vulnerable Software and Affected Versions FreeIPA versions 3.0 through 3.1.2 Description The default LDAP ACIs in FreeIPA do not restrict access to the ipaNTTrustAuthIncoming and ipaNTTrustAuthOutgoing attributes, allowing remote attackers to obtain the Cross-Realm Kerberos Trust key...