3 matches found
EUVD-2014-0019
Malware in sbrugna...
5CVSS6.1AI score0.02118EPSS
SaveExploits0References7
Cross site scripting
The default LDAP ACIs in FreeIPA 3.0 before 3.1.2 do not restrict access to the 1 ipaNTTrustAuthIncoming and 2 ipaNTTrustAuthOutgoing attributes, which allow remote attackers to obtain the Cross-Realm Kerberos Trust key via unspecified vectors...
5CVSS7AI score0.02118EPSS
SaveExploits0References5Affected Software1
PYSEC-2014-103
The default LDAP ACIs in FreeIPA 3.0 before 3.1.2 do not restrict access to the 1 ipaNTTrustAuthIncoming and 2 ipaNTTrustAuthOutgoing attributes, which allow remote attackers to obtain the Cross-Realm Kerberos Trust key via unspecified vectors...
6.3AI score
SaveExploits0References5
20