CVE-2013-0199: Red Hat Freeipa

Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days.

The default LDAP ACIs in FreeIPA 3.0 before 3.1.2 do not restrict access to the (1) ipaNTTrustAuthIncoming and (2) ipaNTTrustAuthOutgoing attributes, which allow remote attackers to obtain the Cross-Realm Kerberos Trust key via unspecified vectors.

Affected products

• Red Hat Freeipa: version 3.0.0 only; version 3.0.1 only; version 3.0.2 only; version 3.1.1 only

Published 2014-05-29. Last modified 2026-06-16.