Поиск уязвимостей
Количество 12
Количество 12
CVE-2026-11861
A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket Granting Service (TGS) due to FreeIPA services not verifying Privilege Attribute Certificate (PAC) certificates. This vulnerability could allow an authenticated Active Directory user to escalate their privileges within the FreeIPA domain.
CVE-2026-11861
A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket Granting Service (TGS) due to FreeIPA services not verifying Privilege Attribute Certificate (PAC) certificates. This vulnerability could allow an authenticated Active Directory user to escalate their privileges within the FreeIPA domain.
CVE-2026-11861
A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket Granting Service (TGS) due to FreeIPA services not verifying Privilege Attribute Certificate (PAC) certificates. This vulnerability could allow an authenticated Active Directory user to escalate their privileges within the FreeIPA domain.
CVE-2026-11861
A flaw was found in FreeIPA. When a trust relationship is configured b ...
GHSA-g67c-jg9c-rqh2
A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket Granting Service (TGS) due to FreeIPA services not verifying Privilege Attribute Certificate (PAC) certificates. This vulnerability could allow an authenticated Active Directory user to escalate their privileges within the FreeIPA domain.
RLSA-2026:83460
Critical: idm:DL1 security, bug fix, and enhancement update
RLSA-2026:72279
Critical: ipa security, bug fix, and enhancement update
RLSA-2026:70564
Critical: ipa security, bug fix, and enhancement update
ELSA-2026-83460
ELSA-2026-83460: idm:DL1 security, bug fix, and enhancement update (CRITICAL)
ELSA-2026-72279
ELSA-2026-72279: ipa security, bug fix, and enhancement update (CRITICAL)
ELSA-2026-70564
ELSA-2026-70564: ipa security, bug fix, and enhancement update (CRITICAL)
ALT-PU-2026-18151
ALT-PU-2026-18151: package `freeipa` update to version 4.12.5-alt6.gitb360c852d3
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2026-11861 A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket Granting Service (TGS) due to FreeIPA services not verifying Privilege Attribute Certificate (PAC) certificates. This vulnerability could allow an authenticated Active Directory user to escalate their privileges within the FreeIPA domain. | CVSS3: 8.1 | 0% Низкий | 3 месяца назад |
 | CVE-2026-11861 A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket Granting Service (TGS) due to FreeIPA services not verifying Privilege Attribute Certificate (PAC) certificates. This vulnerability could allow an authenticated Active Directory user to escalate their privileges within the FreeIPA domain. | CVSS3: 9.6 | 0% Низкий | 3 месяца назад |
 | CVE-2026-11861 A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket Granting Service (TGS) due to FreeIPA services not verifying Privilege Attribute Certificate (PAC) certificates. This vulnerability could allow an authenticated Active Directory user to escalate their privileges within the FreeIPA domain. | CVSS3: 8.1 | 0% Низкий | 3 месяца назад |
| CVE-2026-11861 A flaw was found in FreeIPA. When a trust relationship is configured b ... | CVSS3: 8.1 | 0% Низкий | 3 месяца назад |
| GHSA-g67c-jg9c-rqh2 A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket Granting Service (TGS) due to FreeIPA services not verifying Privilege Attribute Certificate (PAC) certificates. This vulnerability could allow an authenticated Active Directory user to escalate their privileges within the FreeIPA domain. | CVSS3: 9.6 | 0% Низкий | 3 месяца назад |
 | RLSA-2026:83460 Critical: idm:DL1 security, bug fix, and enhancement update | 26 дней назад | ||
| RLSA-2026:72279 Critical: ipa security, bug fix, and enhancement update | около 1 месяца назад | ||
| RLSA-2026:70564 Critical: ipa security, bug fix, and enhancement update | около 2 месяцев назад | ||
| ELSA-2026-83460 ELSA-2026-83460: idm:DL1 security, bug fix, and enhancement update (CRITICAL) | 26 дней назад | ||
| ELSA-2026-72279 ELSA-2026-72279: ipa security, bug fix, and enhancement update (CRITICAL) | около 1 месяца назад | ||
| ELSA-2026-70564 ELSA-2026-70564: ipa security, bug fix, and enhancement update (CRITICAL) | около 2 месяцев назад | ||
| ALT-PU-2026-18151 ALT-PU-2026-18151: package `freeipa` update to version 4.12.5-alt6.gitb360c852d3 | CVSS3: 9.8 | 25 дней назад |
Уязвимостей на страницу