Threats Tagged 'ghsa-g67c-jg9c-rqh2'
View all threats tagged with 'ghsa-g67c-jg9c-rqh2'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'ghsa-g67c-jg9c-rqh2'
Click on any threat for detailed analysis and mitigation recommendations
A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass… (CVE-2026-11861)CVE-2026-11861 0 A critical vulnerability (CVE-2026-11861) exists in FreeIPA when a trust relationship is configured with Active Directory. It allows authenticated Active Directory users to bypass authentication for FreeIPA services by impersonating a client name in the Ticket Granting Service due to FreeIPA not verifying Privilege Attribute Certificate (PAC) certificates. This could enable privilege escalation within the FreeIPA domain. However, practical exploitation is constrained by several conditions, including the need for an unpatched or outdated Active Directory environment that allows duplicate Service Principal Names (SPNs). Modern Active Directory versions with enforced SPN uniqueness block this attack path. No official patch or mitigation meeting Red Hat's criteria is currently available. Join the discussion | GCVE Database | 08/20/2026, 12:31:21 UTC Added: 08/20/2026, 14:08:15 UTC |
Showing 1 to 1 of 1 result