Redhat Enterprise Ipa vulnerabilities

1 vulnerability

Known vulnerabilities in Redhat Enterprise Ipa, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5CVE-2008-3274redhatenterprise_ipa+8
EPSS score
1.84%
The default configuration of Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1 places ldap:///anyone on the read ACL for the krbMKey attribute, which allows remote attackers to obtain the Kerberos master key via an anonymous LDAP query.