NewsThe Hacker NewsSMEPublic sector

    FreeIPA Flaw Chain Lets Anonymous Clients Create Reusable Administrator Credentials

    Share
    A flaw in FreeIPA lets a client that has never logged in create a Kerberos identity of its own choosing in the directory and end up in the administrators group, Red Hat says. FreeIPA is the system that determines who may log in across a Linux domain and maintains all identities in a 389 Directory Server database accessed via LDAP. The attack needs a second flaw in that database software. The

    More on FreeIPA

    Other advisories

    Other news entries

    Source: https://thehackernews.com/2026/09/freeipa-flaw-chain-lets-anonymous.html

    ID