⤷ Title: Critical Privilege Escalation Flaw in FreeIPA Threatens Linux Domain Security
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Jun 2025 00:12:35 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #Domain Admin #FreeIPA #Identity Management #Kerberos #Linux Security #privilege escalation #redhat
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Jun 2025 00:12:35 +0000
════════════════════════
⌗ Tags: #Vulnerability #cybersecurity #Domain Admin #FreeIPA #Identity Management #Kerberos #Linux Security #privilege escalation #redhat
Daily CyberSecurity
Critical Privilege Escalation Flaw in FreeIPA Threatens Linux Domain Security
A critical flaw (CVE-2025-4404, CVSS 9.1) in FreeIPA allows authenticated users to escalate privileges to domain admin via Kerberos impersonation.
⤷ Title: CVE-2025-7493: Critical Flaw in FreeIPA Allows Host Users to Escalate to Domain Administrator
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 01 Oct 2025 02:54:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_7493 #Domain Admin #FreeIPA #Identity Management #Kerberos #LDAP #privilege escalation #security update
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 01 Oct 2025 02:54:11 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_7493 #Domain Admin #FreeIPA #Identity Management #Kerberos #LDAP #privilege escalation #security update
Daily CyberSecurity
CVE-2025-7493: Critical Flaw in FreeIPA Allows Host Users to Escalate to Domain Administrator
A critical flaw (CVE-2025-7493) in FreeIPA allows authenticated users to exploit Kerberos alias checks to gain full domain administrator privileges. Patch to v4.12.5 now.