Paper/Archive/CVE-2025-7493

CVE-2025-7493

Red Hat Red Hat Enterprise Linux 10 — Freeipa: idm: privilege escalation from host to domain admin in freeipa

CVSS 9.1 (CNA)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 46.4.464 × 209.3 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential, FreeIPA still does not validate the root@REALM canonical name, which can also be used as the realm administrator's name. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration.

Affected

ProductAffectedFixed inSource

Red Hat Enterprise Linux 10see advisory0:4.12.2-15.el10_0.4CNA

Red Hat Enterprise Linux 7 Extended Lifecycle Supportsee advisory0:4.6.8-5.el7_9.23CNA

Red Hat Enterprise Linux 8see advisory8100020250919180242.143e9e98CNA

Red Hat Enterprise Linux 8see advisory8100020250918211722.823393f5CNA

Red Hat Enterprise Linux 8.2 Advanced Update Supportsee advisory8020020250924110056.50ea30f9CNA

Red Hat Enterprise Linux 8.2 Advanced Update Supportsee advisory8020020250924104944.792f4060CNA

Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportsee advisory8040020250923180004.f153676aCNA

Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Supportsee advisory8040020250923175408.5b01ab7eCNA

Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-Onsee advisory8040020250923180004.f153676aCNA

Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-Onsee advisory8040020250923175408.5b01ab7eCNA

Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportsee advisory8060020250916172436.c1533a64CNA

Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Supportsee advisory8060020250916174421.ada582f1CNA

Scores by source

redhat (CNA)9.1CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References