Freeipa
Vendor:
First CVE: Sep 12, 2008 · Active for 17 years
5
Total CVEs
More Total CVEs than 79% of tracked products
1.3
Avg CVEs / Year
Higher CVE frequency than 58% of tracked products
5.9
Avg CVSS
Higher Avg CVSS than 23% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Freeipa over time
Volume of CVEsAvg CVSS Base Score
First CVE
Sep 12, 2008
17 years ago
Most Recent CVE
Nov 3, 2014
4,285 days ago
CVE Severity & Scoring
Freeipa5 CVEs
80%
20%
All CVEs353,173 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown5 (100.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High0 (0.0%)
Unknown5 (100.0%)
User Interaction
None0 (0.0%)
Unknown5 (100.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None0 (0.0%)
Unknown5 (100.0%)
Top CVEs
Signals from CVEs in this product scope (5 CVEs).
5 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2012-5484HIGH The client in FreeIPA 2.x and 3.x before 3.1.2 does not properly obtain the Certification Authority (CA) certificate from the server, which allows man-in-the-middle attackers to sp | Jan 27, 2013 | 7.9 | 26 | NO | NO |
CVE-2011-3636MEDIUM Cross-site request forgery (CSRF) vulnerability in the management interface in FreeIPA before 2.1.4 allows remote attackers to hijack the authentication of administrators for reque | Dec 8, 2011 | 6.8 | 21 | NO | NO |
CVE-2013-0199MEDIUM The default LDAP ACIs in FreeIPA 3.0 before 3.1.2 do not restrict access to the (1) ipaNTTrustAuthIncoming and (2) ipaNTTrustAuthOutgoing attributes, which allow remote attackers t | May 29, 2014 | 5.0 | 20 | NO | NO |
CVE-2013-0336MEDIUM The ipapwd_chpwop function in daemons/ipa-slapi-plugins/ipa-pwd-extop/ipa_pwd_extop.c in the directory server (dirsrv) in FreeIPA before 3.2.0 allows remote attackers to cause a de | Nov 3, 2014 | 5.0 | 16 | NO | NO |
CVE-2008-3274MEDIUM The default configuration of Red Hat Enterprise IPA 1.0.0 and FreeIPA before 1.1.1 places ldap:///anyone on the read ACL for the krbMKey attribute, which allows remote attackers to | Sep 12, 2008 | 5.0 | 15 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (5 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (5 CVEs).
Media Mentions
Signals from CVEs in this product scope (5 CVEs).
Top CNAs Publishing CVEs For Freeipa
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 3.1.4 | 1 | 5.0 | 2.8% | 0 | 0 |
| 3.1.3 | 1 | 5.0 | 2.8% | 0 | 0 |
| 3.1.2 | 1 | 5.0 | 2.8% | 0 | 0 |
| 3.1.1 | 3 | 6.0 | 1.8% | 0 | 0 |
| 3.0.2 | 3 | 6.0 | 1.8% | 0 | 0 |
| 3.0.1 | 3 | 6.0 | 1.8% | 0 | 0 |
| 3.0.0 | 3 | 6.0 | 1.8% | 0 | 0 |
| 2.2.1 | 1 | 7.9 | 0.6% | 0 | 0 |
| 2.1.4 | 1 | 7.9 | 0.6% | 0 | 0 |
| 2.1.3 | 1 | 7.9 | 0.6% | 0 | 0 |
| 2.1.2 | 1 | 6.8 | 0.8% | 0 | 0 |
| 2.1.1 | 2 | 7.3 | 0.7% | 0 | 0 |
| 2.1.0 | 2 | 7.3 | 0.7% | 0 | 0 |
| 2.0.1 | 2 | 7.3 | 0.7% | 0 | 0 |
| 2.0.0 | 2 | 7.0 | 0.8% | 0 | 0 |
| 1.9.0 | 1 | 6.8 | 0.8% | 0 | 0 |
| 1.2.2 | 1 | 6.8 | 0.8% | 0 | 0 |
| 1.2.1 | 1 | 6.8 | 0.8% | 0 | 0 |
| 1.2.0 | 1 | 6.8 | 0.8% | 0 | 0 |
| 1.1.1 | 1 | 6.8 | 0.8% | 0 | 0 |