Към съдържанието
Търсене

CVE-2025-4404: заобикаляне на вход и права

9.1

CVSS 3.1

Няма данни

Вероятност да бъде експлоатирана в следващите 30 дни (EPSS)

Няма потвърждение

Атакува се

Няма данни

Време до експлоатация

Атакува се по мрежата, без особени условия, с администраторски права и без действие от потребителя.

CVE радар: още уязвимости от този вид

  • Експлоатация: няма данни за експлоатация
  • Атаката не може да се автоматизира

Описание

Оригинално описание

A privilege escalation from host to domain vulnerability was found in the FreeIPA project. The FreeIPA package fails to validate the uniqueness of the `krbCanonicalName` for the admin account by default, allowing users to create services with the same canonical name as the REALM admin. When a successful attack happens, the user can retrieve a Kerberos ticket in the name of this service, containing the admin@REALM credential. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration.

Засегнати продукти

  • : преди 4.12.4
  • Red Hat Red Hat Enterprise Linux 10: 0:4.12.2-15.el10_0.1 преди *
  • Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support: 0:4.6.8-5.el7_9.18 преди *
  • Red Hat Red Hat Enterprise Linux 8: 8100020250603150652.143e9e98 преди *
  • Red Hat Red Hat Enterprise Linux 8: 8100020250603134209.823393f5 преди *
  • Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support: 8020020250609031831.50ea30f9 преди *
  • Red Hat Red Hat Enterprise Linux 8.2 Advanced Update Support: 8020020250609030144.792f4060 преди *
  • Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support: 8040020250609101903.f153676a преди *
  • Red Hat Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support: 8040020250609095221.5b01ab7e преди *
  • Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support: 8060020250606060927.c1533a64 преди *
  • Red Hat Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support: 8060020250606060504.ada582f1 преди *
  • Red Hat Red Hat Enterprise Linux 8.6 Telecommunications Update Service: 8060020250606060927.c1533a64 преди *
  • Red Hat Red Hat Enterprise Linux 8.6 Telecommunications Update Service: 8060020250606060504.ada582f1 преди *
  • Red Hat Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions: 8060020250606060927.c1533a64 преди *
  • Red Hat Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions: 8060020250606060504.ada582f1 преди *
  • Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service: 8080020250604195510.e581a9e4 преди *
  • Red Hat Red Hat Enterprise Linux 8.8 Telecommunications Update Service: 8080020250604202433.b0a6ceea преди *
  • Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions: 8080020250604195510.e581a9e4 преди *
  • Red Hat Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions: 8080020250604202433.b0a6ceea преди *
  • Red Hat Red Hat Enterprise Linux 9: 0:4.12.2-14.el9_6.1 преди *
  • Red Hat Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions: 0:4.9.8-11.el9_0.4 преди *
  • Red Hat Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions: 0:4.10.1-12.el9_2.4 преди *
  • Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support: 0:4.11.0-15.el9_4.5 преди *
  • Red Hat Red Hat Enterprise Linux 6

Вид слабост

История

  • 17 юни 2025 Публикувано

Други уязвимости в същия продукт

Първоизточници

CVE-2025-4404: заобикаляне на вход и права | freedomonline.bg