An unauthenticated remote attacker can exploit a flaw in FreeIPA's self-managed OTP token access control instructions to create arbitrary Kerberos principals and grant them administrator group membership.
FreeIPA +2
identity-management
authentication-bypass
privilege-escalation
ldap
vulnerability
cve
linux
3t
3c
updated