CVE-2013-0199: FreeIPA LDAP Access Control Vulnerability
Summary
CVE-2013-0199: The default LDAP ACIs in FreeIPA 3.0 before 3.1.2 do not restrict access to the (1) ipaNTTrustAuthIncoming and (2) ipaNTTrustAuthOutgoing attributes, which allow remote attackers to obtain the Cross-Realm Kerberos Trust... Affects freeipa versions 4.10.2 – 4.9.12. No fix is published. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
FreeIPA is an integrated security information management solution that provides centralized authentication, authorization, and account information by storing data about users, groups, and policies. It is widely used in enterprise environments to manage user identities and access control. The vulnerability in question affects FreeIPA versions 3.0 through 3.1.2, where the default LDAP Access Control Instructions (ACIs) do not adequately restrict access to sensitive attributes, potentially exposing critical security information.
Vulnerability Detail
The vulnerability arises from insufficient access controls on the ipaNTTrustAuthIncoming and ipaNTTrustAuthOutgoing attributes in FreeIPA. This flaw allows remote attackers to exploit the system and gain unauthorized access to the Cross-Realm Kerberos Trust key. The implications of this vulnerability are severe, as it could lead to unauthorized authentication and access to sensitive resources, compromising the integrity and confidentiality of the system.
How To Fix
No fixed version is published for this vulnerability.
Tip — Not sure whether your app is affected? Vulert can check the versions your app actually runs. Scan free →
Workaround
As a temporary workaround, you can manually adjust the LDAP ACIs to restrict access to the affected attributes. This can be done by modifying the LDAP configuration to limit access to only trusted users or groups. However, this is not a permanent solution, and updating the package is strongly advised.
Conclusion
CVE-2013-0199 represents a significant security vulnerability in FreeIPA that could allow unauthorized access to sensitive information. It is crucial for users of affected versions to update their installations to the patched version to ensure the security of their systems. Additionally, implementing proper access controls can help mitigate risks until the update is applied.
See every vulnerability recorded for freeipa →
FAQ
CVE-2013-0199 is a vulnerability in FreeIPA that allows unauthorized access to sensitive LDAP attributes due to insufficient access controls.
FreeIPA versions 3.0 through 3.1.2 are affected by this vulnerability.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The risks include unauthorized access to the Cross-Realm Kerberos Trust key, which can lead to compromised authentication and access to sensitive resources.
Yes, updating FreeIPA to version 3.1.2 or later will patch this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for freeipa.
