← CVE Intelligence

CVE-2025-7493

Freeipa: idm: privilege escalation from host to domain admin in freeipa PUBLISHED

Description (CNA)

A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential, FreeIPA still does not validate the root@REALM canonical name, which can also be used as the realm administrator's name. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat Enterprise Linux 10unaffected 0:4.12.2-15.el10_0.4 before *
Red Hat / Red Hat Enterprise Linux 7 Extended Lifecycle Supportunaffected 0:4.6.8-5.el7_9.23 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 8100020250919180242.143e9e98 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 8100020250918211722.823393f5 before *
Red Hat / Red Hat Enterprise Linux 8.2 Advanced Update Supportunaffected 8020020250924110056.50ea30f9 before *
Red Hat / Red Hat Enterprise Linux 8.2 Advanced Update Supportunaffected 8020020250924104944.792f4060 before *
Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportunaffected 8040020250923180004.f153676a before *
Red Hat / Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportunaffected 8040020250923175408.5b01ab7e before *
Red Hat / Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-Onunaffected 8040020250923180004.f153676a before *
Red Hat / Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-Onunaffected 8040020250923175408.5b01ab7e before *
Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportunaffected 8060020250916172436.c1533a64 before *
Red Hat / Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportunaffected 8060020250916174421.ada582f1 before *
Red Hat / Red Hat Enterprise Linux 8.6 Telecommunications Update Serviceunaffected 8060020250916172436.c1533a64 before *
Red Hat / Red Hat Enterprise Linux 8.6 Telecommunications Update Serviceunaffected 8060020250916174421.ada582f1 before *
Red Hat / Red Hat Enterprise Linux 8.6 Update Services for SAP Solutionsunaffected 8060020250916172436.c1533a64 before *
Red Hat / Red Hat Enterprise Linux 8.6 Update Services for SAP Solutionsunaffected 8060020250916174421.ada582f1 before *
Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Serviceunaffected 8080020250918184739.e581a9e4 before *
Red Hat / Red Hat Enterprise Linux 8.8 Telecommunications Update Serviceunaffected 8080020250918152850.b0a6ceea before *
Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutionsunaffected 8080020250918184739.e581a9e4 before *
Red Hat / Red Hat Enterprise Linux 8.8 Update Services for SAP Solutionsunaffected 8080020250918152850.b0a6ceea before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:4.12.2-14.el9_6.5 before *
Red Hat / Red Hat Enterprise Linux 9.0 Update Services for SAP Solutionsunaffected 0:4.9.8-11.el9_0.5 before *
Red Hat / Red Hat Enterprise Linux 9.2 Update Services for SAP Solutionsunaffected 0:4.10.1-12.el9_2.6 before *
Red Hat / Red Hat Enterprise Linux 9.4 Extended Update Supportunaffected 0:4.11.0-15.el9_4.7 before *
Red Hat / Red Hat Enterprise Linux 6unknown

CWE

CWE-1220

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.