FreeIPA Flaw Chain Lets Anonymous Clients Create Reusable Administrator Credentials

Image: The Hacker News
ad slot · in-content video 16:9
Coverage
More coverage
- A flaw in FreeIPA lets a client that has never logged in create a Kerberos identity of its own choosing in the directory and end up in the administrators group, Red Hat says. FreeIPA is the system that determines who may log in across a Linux domain and maintains all identities in a 389 Directory…