Maple Labs

CVE search · CVE-2026-13097

CVE-2026-13097

high 8.7

A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations of the same principal name, allowing a user with sufficient LDAP write privileges to create a service principal that impersonates an existing privileged one. This can lead to unauthorized acquisition of Kerberos service tickets for sensitive services, potentially resulting in full domain compromise.

Open in the NVD CVE.org JSON

Details

Status
Modified
Published
Last changed
Source
secalert@redhat.com
Weakness
CWE-706

Severity

VersionScoreVectorSource
CVSS 3.1 high 8.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N secalert@redhat.comSecondary

Affected products

Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.

References