CVE-2008-3274

The CVE-2008-3274 issue affects Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1, where the default LDAP ACLs expose the krbMKey attribute to ldap:///anyone, allowing anonymous LDAP queries to leak the Kerberos master key. This is a read ACL misconfiguration that can impact confidentiality (...