CVE-2008-3274 in FreeIPA

摘要

由 VulDB • 2026-06-08

Red Hat Enterprise IPA 1.0.0 e FreeIPA precedenti alla versione 1.1.1 configurano di default ldap:///anyone nell'ACL di lettura per l'attributo krbMKey, consentendo ad attaccanti remoti di ottenere la chiave principale Kerberos tramite una query LDAP anonima.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• 预定: 2008-07-24
• 披露: 2008-09-12
• 管理: 已接受
• 条目: VDB-44018
• CPE: 准备好
• CWE: CWE-200 (已确认)
• CVSS: 5.3 (VulDB)
• EPSS: 0.01843
• KEV: 否
• 活动: 非常低
• 部门: Chemical, Industry, ...

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2008-3274
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2008-3274
• CVE Details: https://www.cvedetails.com/cve/CVE-2008-3274/