Threats tagged 'ghsa-vm59-52f9-r52r'

A critical privilege escalation vulnerability (CVE-2025-7493) exists in FreeIPA that allows an attacker with host-level privileges to escalate to domain administrator. The flaw arises from improper validation of the krbCanonicalName, specifically failing to validate the root@REALM canonical name, enabling administrative access over the REALM and potential sensitive data exfiltration. This vulnerability is similar to CVE-2025-4404 but affects a different canonical name validation path. Red Hat has issued a security advisory with patches for affected Red Hat Enterprise Linux 9 variants.