#kerberos
-
FreeIPA Vulnerability Chain Grants an Anonymous Client Administrator Rights
Red Hat has described a pair of defects that together let a client who has never logged in create its own Kerberos account in the directory and land in the administrators group. The fix ships in FreeIPA 4.13.4.