CVE-2025-7493

CVE-2025-7493 · Freeipa: idm: privilege escalation from host to domain admin in freeipa

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

Cette page présente une partie des faits des sources. Consultez les avis liés pour la description complète et les versions concernées.

A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential, FreeIPA still does not validate the root@REALM canonical name, which can also be used as the realm administrator's name. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration.

CVSS 9.1 · Critique · EPSS 0,6%

Publication

2025-09-30T15:06:46.836Z

Mise à jour

2026-02-26T17:47:47.013Z

Pile logicielle: system

Vérifiez votre serveur →