CyberRota Analysis
AI-GeneratedA critical privilege escalation vulnerability exists in FreeIPA, where improper handling of Kerberos principal name attributes in the 389-ds directory server allows users with sufficient LDAP write privileges to impersonate existing privileged service principals. This flaw can enable unauthorized access to Kerberos service tickets for sensitive services, posing a risk of full domain compromise. Organizations using FreeIPA should prioritize immediate remediation to mitigate potential exploitation.
Original NVD Description
A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations of the same principal name, allowing a user with sufficient LDAP write privileges to create a service principal that impersonates an existing privileged one. This can lead to unauthorized acquisition of Kerberos service tickets for sensitive services, potentially resulting in full domain compromise.
Related CVEs
Other vulnerabilities affecting the same vendor(s)