Red Hat FreeIPA 3.0.0
Approved changes feed: RSS · Atom
cpe:2.3:a:redhat:freeipa:3.0.0:*:*:*:*:*:*:*
part: a version: 3.0.0 update: *
| Vendor | Redhat (e942785a-ca89-506e-bd99-50782639cde3) |
|---|---|
| Product | Freeipa (dbb7eae9-86f5-5b45-b6a2-2309cd35e119) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/freeipa |
purl2cpe | 2026-06-01 10:12:55.716882 |
pkg:deb/ubuntu/freeipa |
purl2cpe | 2026-06-01 10:12:55.716883 |
pkg:docker/centos/freeipa |
purl2cpe | 2026-06-01 10:12:55.716884 |
pkg:github/freeipa/freeipa |
purl2cpe | 2026-06-01 10:12:55.716886 |
pkg:gitlab/redhat/freeipa |
purl2cpe | 2026-06-01 10:12:55.716887 |
pkg:rpm/fedora/freeipa |
purl2cpe | 2026-06-01 10:12:55.716889 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-0336 |
vulnerable | 2026-06-08 05:03:47.118057 |
Details available
The ipapwd_chpwop function in daemons/ipa-slapi-plugins/ipa-pwd-extop/ipa_pwd_extop.c in the directory server (dirsrv) in FreeIPA before 3.2.0 allows remote attackers to cause a denial of service (crash) via a connection request without a username/dn, related to the 389 directory server.
Published: 2014-11-03T23:00:00.000Z
Updated: 2024-08-06T14:25:09.649Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-0199 |
vulnerable | 2026-06-08 05:03:45.778027 |
Details available
The default LDAP ACIs in FreeIPA 3.0 before 3.1.2 do not restrict access to the (1) ipaNTTrustAuthIncoming and (2) ipaNTTrustAuthOutgoing attributes, which allow remote attackers to obtain the Cross-Realm Kerberos Trust key via unspecified vectors.
Published: 2014-05-29T14:00:00.000Z
Updated: 2024-08-06T14:18:09.251Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-5484 |
vulnerable | 2026-06-08 05:02:56.677496 |
Details available
The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority (CA) certificate from the server, which allows man-in-the-middle attackers to spoof a join procedure via a crafted certificate.
Published: 2013-01-27T18:00:00.000Z
Updated: 2024-08-06T21:05:47.243Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.