CVEvulnerability

CVE-2026-13097

8.7 HIGH Published 2026-08-20 Modified 2026-10-27 Official page ↗
Status
Modified
Published
2026-08-20
Last modified
2026-10-27
Assigner
[email protected]
CVSS 3.1 ([email protected])
8.7 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
Weaknesses
CWE-706

Description

A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations of the same principal name, allowing a user with sufficient LDAP write privileges to create a service principal that impersonates an existing privileged one. This can lead to unauthorized acquisition of Kerberos service tickets for sensitive services, potentially resulting in full domain compromise.

Affected configurations

• redhat enterprise linux 7.0 • redhat enterprise linux 8.0 • redhat enterprise linux 9.0 • redhat enterprise linux 10.0 • freeipa freeipa 4.12.2

Related

Weakness · CWE (1)

  • CWE-706 Use of Incorrectly-Resolved Name or Reference weakness

References