Threats tagged 'ghsa-w66p-wgwc-mqmw'

A privilege escalation vulnerability (CVE-2025-4404) exists in the FreeIPA project where the uniqueness of the krbCanonicalName for the admin account is not validated by default. This allows an attacker to create services with the same canonical name as the REALM admin, enabling retrieval of a Kerberos ticket with admin credentials. Successful exploitation permits administrative actions over the REALM, potentially leading to sensitive data access and exfiltration. A security update addressing this issue is available from Red Hat for multiple Red Hat Enterprise Linux 9 variants.