CVE-2026-11861

Katalog CVE

CVSS 8.1 · High EPSS 0,22%

Kerentanan Incorrect Privilege Assignment pada freeipa, redhat enterprise linux. Skor CVSS 3.1 8.1 (High) menurut NVD.

Deskripsi (NVD)

A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket Granting Service (TGS) due to FreeIPA services not verifying Privilege Attribute Certificate (PAC) certificates. This vulnerability could allow an authenticated Active Directory user to escalate their privileges within the FreeIPA domain.

Rincian

Terbit di NVD

20 Agustus 2026

Terakhir diubah

28 September 2026

Status NVD

Modified

CVSS 3.1

8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-266: Incorrect Privilege Assignment

EPSS (30 hari)

0,22% peluang dieksploitasi; lebih tinggi dari 11,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://access.redhat.com/security/cve/CVE-2026-11861 advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=2487472 issue tracking · advisory vendor
• https://access.redhat.com/errata/RHSA-2026:70564
• https://access.redhat.com/errata/RHSA-2026:72279