Количество 13
Количество 13
BDU:2025-14421
Уязвимость сервера FreeIpa, связанная с недостатками разграничения доступа, позволяющая нарушителю повысить свои привилегии
CVE-2025-7493
A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential, FreeIPA still does not validate the root@REALM canonical name, which can also be used as the realm administrator's name. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration.
CVE-2025-7493
A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential, FreeIPA still does not validate the root@REALM canonical name, which can also be used as the realm administrator's name. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration.
CVE-2025-7493
A privilege escalation flaw from host to domain administrator was foun ...
ROS-20251112-04
Уязвимость 389-ds-base
RLSA-2025:20994
Important: ipa security update
RLSA-2025:17085
Important: ipa security update
GHSA-vm59-52f9-r52r
A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential, FreeIPA still does not validate the root@REALM canonical name, which can also be used as the realm administrator's name. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration.
ELSA-2025-20928
ELSA-2025-20928: ipa security update (IMPORTANT)
ELSA-2025-17649
ELSA-2025-17649: ipa security update (IMPORTANT)
ELSA-2025-17129
ELSA-2025-17129: idm:DL1 security update (IMPORTANT)
ELSA-2025-17085
ELSA-2025-17085: ipa security update (IMPORTANT)
ELSA-2025-17084
ELSA-2025-17084: ipa security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2025-14421 Уязвимость сервера FreeIpa, связанная с недостатками разграничения доступа, позволяющая нарушителю повысить свои привилегии | CVSS3: 9.1 | 0% Низкий | 3 месяца назад |
 | CVE-2025-7493 A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential, FreeIPA still does not validate the root@REALM canonical name, which can also be used as the realm administrator's name. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration. | CVSS3: 9.1 | 0% Низкий | 2 месяца назад |
 | CVE-2025-7493 A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential, FreeIPA still does not validate the root@REALM canonical name, which can also be used as the realm administrator's name. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration. | CVSS3: 9.1 | 0% Низкий | 2 месяца назад |
| CVE-2025-7493 A privilege escalation flaw from host to domain administrator was foun ... | CVSS3: 9.1 | 0% Низкий | 2 месяца назад |
 | ROS-20251112-04 Уязвимость 389-ds-base | CVSS3: 9.1 | 0% Низкий | 20 дней назад |
 | RLSA-2025:20994 Important: ipa security update | 0% Низкий | 10 дней назад | |
| RLSA-2025:17085 Important: ipa security update | 0% Низкий | около 2 месяцев назад | |
| GHSA-vm59-52f9-r52r A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential, FreeIPA still does not validate the root@REALM canonical name, which can also be used as the realm administrator's name. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration. | CVSS3: 9.1 | 0% Низкий | 2 месяца назад |
| ELSA-2025-20928 ELSA-2025-20928: ipa security update (IMPORTANT) | 7 дней назад | ||
| ELSA-2025-17649 ELSA-2025-17649: ipa security update (IMPORTANT) | 21 день назад | ||
| ELSA-2025-17129 ELSA-2025-17129: idm:DL1 security update (IMPORTANT) | 2 месяца назад | ||
| ELSA-2025-17085 ELSA-2025-17085: ipa security update (IMPORTANT) | 2 месяца назад | ||
| ELSA-2025-17084 ELSA-2025-17084: ipa security update (IMPORTANT) | 2 месяца назад |
Уязвимостей на страницу