FreeIPA Flaw Chain Lets Anonymous Clients Create Reusable Administrator Credentials

Red Hat disclosed a FreeIPA vulnerability chain allowing unauthenticated clients to forge Kerberos identities and gain administrator rights. The attack requires exploiting a second flaw in the underlying 389 Directory Server database. Patches are expected to address the critical privilege escalation path.