Skip to content
Threat Feed
Subscribe

Product

FreeIPA (All Versions)

1 brief RSS
critical advisory

Unauthenticated Administrative Compromise in FreeIPA via OTP ACI Flaw

An unauthenticated remote attacker can exploit a flaw in FreeIPA's self-managed OTP token access control instructions to create arbitrary Kerberos principals and grant them administrator group membership.

FreeIPA +1 identity-management authentication-bypass privilege-escalation ldap vulnerability cve linux
3t 1c