Threats Tagged 'cve-2026-13097'

A critical privilege escalation vulnerability exists in FreeIPA due to improper uniqueness enforcement on Kerberos principal name attributes in the 389-ds directory server. This flaw allows users with sufficient LDAP write privileges to create service principals that impersonate existing privileged ones, potentially enabling unauthorized acquisition of Kerberos service tickets and leading to full domain compromise. No official fix or patch is currently available, and mitigation options do not meet Red Hat's criteria for ease of use or widespread applicability.

A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations of the same principal name, allowing a user with sufficient LDAP write privileges to create a service principal that impersonates an existing privileged one. This can lead to unauthorized acquisition of Kerberos service tickets for sensitive services, potentially resulting in full domain compromise.