Threats tagged 'ghsa-6xg7-8fr6-8p33'

CVE-2026-19550 is a medium-severity authorization vulnerability in FreeIPA on Red Hat Enterprise Linux 9. It allows an authenticated, non-privileged user to trigger a privileged Active Directory trust refresh using attacker-supplied server and credentials. This can lead to unauthorized modification of trusted-domain and ID-range identity data in the IPA LDAP directory. The vulnerability affects only IdM/FreeIPA servers with established cross-forest trusts with Active Directory. A fix is available upstream and included in Red Hat Enterprise Linux 9.8 updates.