CVE-2025-7493 (CNNVD-202509-4465)
CRITICAL
中文标题:
Red Hat FreeIPA 安全漏洞
英文标题:
Freeipa: idm: privilege escalation from host to domain admin in freeipa
CVSS分数:
9.1
发布时间:
2025-09-30 15:06:46
漏洞类型:
其他
状态:
PUBLISHED
数据质量分数:
0.30
数据版本:
v3
漏洞描述
中文描述:
Red Hat FreeIPA是美国红帽（Red Hat）公司的一套集成的安全信息管理解决方案。该产品主要为Linux和Unix计算机网络提供身份管理、策略管理和审计管理（IPA）等功能。 Red Hat FreeIPA存在安全漏洞，该漏洞源于未验证root@REALM规范名称的唯一性，可能导致权限提升和敏感数据泄露。
英文描述:
A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential, FreeIPA still does not validate the root@REALM canonical name, which can also be used as the realm administrator's name. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration.
CWE类型:
CWE-1220
标签:
（暂无数据）
受影响产品
| 厂商 | 产品 | 版本 | 版本范围 | 平台 | CPE |
|---|---|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | - | - | - |
cpe:/o:redhat:enterprise_linux:10.0
|
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support | - | - | - |
cpe:/o:redhat:rhel_els:7
|
| Red Hat | Red Hat Enterprise Linux 8 | 8 | - | - |
cpe:/a:redhat:enterprise_linux:8::appstream
|
| Red Hat | Red Hat Enterprise Linux 8.2 Advanced Update Support | 8.2 | - | - |
cpe:/a:redhat:rhel_aus:8.2::appstream
|
| Red Hat | Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | 8.4 | - | - |
cpe:/a:redhat:rhel_eus_long_life:8.4::appstream
|
| Red Hat | Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On | 8.4 | - | - |
cpe:/a:redhat:rhel_eus_long_life:8.4::appstream
|
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | 8.6 | - | - |
cpe:/a:redhat:rhel_tus:8.6::appstream
|
| Red Hat | Red Hat Enterprise Linux 8.6 Telecommunications Update Service | 8.6 | - | - |
cpe:/a:redhat:rhel_tus:8.6::appstream
|
| Red Hat | Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | 8.6 | - | - |
cpe:/a:redhat:rhel_tus:8.6::appstream
|
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service | 8.8 | - | - |
cpe:/a:redhat:rhel_e4s:8.8::appstream
|
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | 8.8 | - | - |
cpe:/a:redhat:rhel_e4s:8.8::appstream
|
| Red Hat | Red Hat Enterprise Linux 9 | 9 | - | - |
cpe:/a:redhat:enterprise_linux:9::crb
|
| Red Hat | Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions | 9.0 | - | - |
cpe:/a:redhat:rhel_e4s:9.0::appstream
|
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | 9.2 | - | - |
cpe:/a:redhat:rhel_e4s:9.2::appstream
|
| Red Hat | Red Hat Enterprise Linux 9.4 Extended Update Support | 9.4 | - | - |
cpe:/a:redhat:rhel_eus:9.4::crb
|
| Red Hat | Red Hat Enterprise Linux 6 | - | - | - |
cpe:/o:redhat:enterprise_linux:6
|
解决方案
中文解决方案:
（暂无数据）
英文解决方案:
（暂无数据）
临时解决方案:
（暂无数据）
参考链接
RHSA-2025:17084
vendor-advisory
cve.org
访问
cve.org
RHSA-2025:17085
vendor-advisory
cve.org
访问
cve.org
RHSA-2025:17086
vendor-advisory
cve.org
访问
cve.org
RHSA-2025:17087
vendor-advisory
cve.org
访问
cve.org
RHSA-2025:17088
vendor-advisory
cve.org
访问
cve.org
RHSA-2025:17129
vendor-advisory
cve.org
访问
cve.org
RHSA-2025:17645
vendor-advisory
cve.org
访问
cve.org
RHSA-2025:17646
vendor-advisory
cve.org
访问
cve.org
RHSA-2025:17647
vendor-advisory
cve.org
访问
cve.org
RHSA-2025:17648
vendor-advisory
cve.org
访问
cve.org
RHSA-2025:17649
vendor-advisory
cve.org
访问
cve.org
无标题
vdb-entry
cve.org
访问
cve.org
RHBZ#2389448
issue-tracking
cve.org
访问
cve.org
af854a3a-2127-422b-91ae-364da2661108
OTHER
nvd.nist.gov
访问
nvd.nist.gov
CVSS评分详情
3.1 (cna)
CRITICAL
9.1
CVSS向量:
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
机密性
HIGH
完整性
HIGH
可用性
HIGH
时间信息
发布时间:
2025-09-30 15:06:46
修改时间:
2025-11-06 21:10:49
创建时间:
2025-11-11 15:40:51
更新时间:
2025-11-11 16:00:14
利用信息
暂无可利用代码信息
数据源详情
| 数据源 | 记录ID | 版本 | 提取时间 |
|---|---|---|---|
| CVE | cve_CVE-2025-7493 |
2025-11-11 15:23:36 | 2025-11-11 07:40:51 |
| NVD | nvd_CVE-2025-7493 |
2025-11-11 15:01:04 | 2025-11-11 07:48:38 |
| CNNVD | cnnvd_CNNVD-202509-4465 |
2025-11-11 15:12:59 | 2025-11-11 08:00:14 |
版本与语言
当前版本:
v3
主要语言:
EN
支持语言:
EN
ZH
安全公告
暂无安全公告信息
变更历史
v3
CNNVD
2025-11-11 16:00:14
vulnerability_type: 未提取 → 其他; cnnvd_id: 未提取 → CNNVD-202509-4465; data_sources: ['cve', 'nvd'] → ['cnnvd', 'cve', 'nvd']
查看详细变更
- vulnerability_type: 未提取 -> 其他
- cnnvd_id: 未提取 -> CNNVD-202509-4465
- data_sources: ['cve', 'nvd'] -> ['cnnvd', 'cve', 'nvd']
v2
NVD
2025-11-11 15:48:38
affected_products_count: 25 → 16; references_count: 13 → 14; data_sources: ['cve'] → ['cve', 'nvd']
查看详细变更
- affected_products_count: 25 -> 16
- references_count: 13 -> 14
- data_sources: ['cve'] -> ['cve', 'nvd']