Поиск уязвимостей
Количество 13
Количество 13
GHSA-q4ph-46qc-4w6x
A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations of the same principal name, allowing a user with sufficient LDAP write privileges to create a service principal that impersonates an existing privileged one. This can lead to unauthorized acquisition of Kerberos service tickets for sensitive services, potentially resulting in full domain compromise.
CVE-2026-13097
A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations of the same principal name, allowing a user with sufficient LDAP write privileges to create a service principal that impersonates an existing privileged one. This can lead to unauthorized acquisition of Kerberos service tickets for sensitive services, potentially resulting in full domain compromise.
CVE-2026-13097
A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations of the same principal name, allowing a user with sufficient LDAP write privileges to create a service principal that impersonates an existing privileged one. This can lead to unauthorized acquisition of Kerberos service tickets for sensitive services, potentially resulting in full domain compromise.
CVE-2026-13097
A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations of the same principal name, allowing a user with sufficient LDAP write privileges to create a service principal that impersonates an existing privileged one. This can lead to unauthorized acquisition of Kerberos service tickets for sensitive services, potentially resulting in full domain compromise.
CVE-2026-13097
A privilege escalation flaw was found in FreeIPA. The uniqueness const ...
ALT-PU-2025-1448
ALT-PU-2025-1448: package `freeipa` update to version 4.12.3-alt1
RLSA-2026:83460
Critical: idm:DL1 security, bug fix, and enhancement update
RLSA-2026:72279
Critical: ipa security, bug fix, and enhancement update
RLSA-2026:70564
Critical: ipa security, bug fix, and enhancement update
ELSA-2026-83460
ELSA-2026-83460: idm:DL1 security, bug fix, and enhancement update (CRITICAL)
ELSA-2026-72279
ELSA-2026-72279: ipa security, bug fix, and enhancement update (CRITICAL)
ELSA-2026-70564
ELSA-2026-70564: ipa security, bug fix, and enhancement update (CRITICAL)
ALT-PU-2026-18151
ALT-PU-2026-18151: package `freeipa` update to version 4.12.5-alt6.gitb360c852d3
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-q4ph-46qc-4w6x A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations of the same principal name, allowing a user with sufficient LDAP write privileges to create a service principal that impersonates an existing privileged one. This can lead to unauthorized acquisition of Kerberos service tickets for sensitive services, potentially resulting in full domain compromise. | CVSS3: 9.1 | 1% Низкий | 3 месяца назад |
 | CVE-2026-13097 A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations of the same principal name, allowing a user with sufficient LDAP write privileges to create a service principal that impersonates an existing privileged one. This can lead to unauthorized acquisition of Kerberos service tickets for sensitive services, potentially resulting in full domain compromise. | CVSS3: 8.7 | 1% Низкий | 3 месяца назад |
 | CVE-2026-13097 A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations of the same principal name, allowing a user with sufficient LDAP write privileges to create a service principal that impersonates an existing privileged one. This can lead to unauthorized acquisition of Kerberos service tickets for sensitive services, potentially resulting in full domain compromise. | CVSS3: 8.7 | 1% Низкий | 3 месяца назад |
 | CVE-2026-13097 A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations of the same principal name, allowing a user with sufficient LDAP write privileges to create a service principal that impersonates an existing privileged one. This can lead to unauthorized acquisition of Kerberos service tickets for sensitive services, potentially resulting in full domain compromise. | CVSS3: 8.7 | 1% Низкий | 3 месяца назад |
| CVE-2026-13097 A privilege escalation flaw was found in FreeIPA. The uniqueness const ... | CVSS3: 8.7 | 1% Низкий | 3 месяца назад |
| ALT-PU-2025-1448 ALT-PU-2025-1448: package `freeipa` update to version 4.12.3-alt1 | CVSS3: 8.7 | почти 2 года назад | |
 | RLSA-2026:83460 Critical: idm:DL1 security, bug fix, and enhancement update | 26 дней назад | ||
| RLSA-2026:72279 Critical: ipa security, bug fix, and enhancement update | около 1 месяца назад | ||
| RLSA-2026:70564 Critical: ipa security, bug fix, and enhancement update | около 2 месяцев назад | ||
| ELSA-2026-83460 ELSA-2026-83460: idm:DL1 security, bug fix, and enhancement update (CRITICAL) | 26 дней назад | ||
| ELSA-2026-72279 ELSA-2026-72279: ipa security, bug fix, and enhancement update (CRITICAL) | около 1 месяца назад | ||
| ELSA-2026-70564 ELSA-2026-70564: ipa security, bug fix, and enhancement update (CRITICAL) | около 2 месяцев назад | ||
| ALT-PU-2026-18151 ALT-PU-2026-18151: package `freeipa` update to version 4.12.5-alt6.gitb360c852d3 | CVSS3: 9.8 | 25 дней назад |
Уязвимостей на страницу