Vigie VulnDBEuropean-hosted Vulnerability DB
EN
Menu

Freeipa: idm: privilege escalation from host to domain admin in freeipa (Red Hat Red Hat Enterprise Linux 10)

CVE-2025-7493
CRITICAL 9.1

En bref

Source
NVD
EPSS
EPSS 0.56 % · centile 46 ()
État
PUBLISHED
Publiée
Mise à jour
Attribuée par
redhat
Statut NVD
Deferred

Rechercher sur…

Description

A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential, FreeIPA still does not validate the root@REALM canonical name, which can also be used as the realm administrator's name. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration.

Faiblesses (CWE)

  • CWE-1220 — Insufficient Granularity of Access Control

Références

Scores

VersionScoreVecteurÉvalué par
CVSS 3.1CRITICAL 9.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:Hredhat
CVSS 3.1CRITICAL 9.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:HNVD · secalert@redhat.com (Secondary)

Références européennes

Produits affectés

ProduitVersions
Red Hat · Red Hat Enterprise Linux 10unaffected 0:4.12.2-15.el10_0.4 < *
Red Hat · Red Hat Enterprise Linux 7 Extended Lifecycle Supportunaffected 0:4.6.8-5.el7_9.23 < *
Red Hat · Red Hat Enterprise Linux 8unaffected 8100020250919180242.143e9e98 < *
Red Hat · Red Hat Enterprise Linux 8unaffected 8100020250918211722.823393f5 < *
Red Hat · Red Hat Enterprise Linux 8.2 Advanced Update Supportunaffected 8020020250924110056.50ea30f9 < *
Red Hat · Red Hat Enterprise Linux 8.2 Advanced Update Supportunaffected 8020020250924104944.792f4060 < *
Red Hat · Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportunaffected 8040020250923180004.f153676a < *
Red Hat · Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportunaffected 8040020250923175408.5b01ab7e < *
Red Hat · Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-Onunaffected 8040020250923180004.f153676a < *
Red Hat · Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-Onunaffected 8040020250923175408.5b01ab7e < *
Red Hat · Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportunaffected 8060020250916172436.c1533a64 < *
Red Hat · Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportunaffected 8060020250916174421.ada582f1 < *
Red Hat · Red Hat Enterprise Linux 8.6 Telecommunications Update Serviceunaffected 8060020250916172436.c1533a64 < *
Red Hat · Red Hat Enterprise Linux 8.6 Telecommunications Update Serviceunaffected 8060020250916174421.ada582f1 < *
Red Hat · Red Hat Enterprise Linux 8.6 Update Services for SAP Solutionsunaffected 8060020250916172436.c1533a64 < *
Red Hat · Red Hat Enterprise Linux 8.6 Update Services for SAP Solutionsunaffected 8060020250916174421.ada582f1 < *
Red Hat · Red Hat Enterprise Linux 8.8 Telecommunications Update Serviceunaffected 8080020250918184739.e581a9e4 < *
Red Hat · Red Hat Enterprise Linux 8.8 Telecommunications Update Serviceunaffected 8080020250918152850.b0a6ceea < *
Red Hat · Red Hat Enterprise Linux 8.8 Update Services for SAP Solutionsunaffected 8080020250918184739.e581a9e4 < *
Red Hat · Red Hat Enterprise Linux 8.8 Update Services for SAP Solutionsunaffected 8080020250918152850.b0a6ceea < *

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD