The remote AlmaLinux 10 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:9190 advisory.

    * freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The AlmaLinux 9.2 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1763391572 advisory.

  - A vulnerability was found in FreeIPA in how the initial implementation of MS-SFU by MIT Kerberos was     missing a condition for granting the forwardable flag on S4U2Self tickets. Fixing this mistake required     adding a special case for the check_allowed_to_delegate() function: If the target service argument is     NULL, then it means the KDC is probing for general constrained delegation rules and not checking a     specific S4U2Proxy request. In FreeIPA 4.11.0, the behavior of ipadb_match_acl() was modified to match the     changes from upstream MIT Kerberos 1.20. However, a mistake resulting in this mechanism applies in cases     where the target service argument is set AND where it is unset. This results in S4U2Proxy requests being     accepted regardless of whether or not there is a matching service delegation rule. (CVE-2024-2698)

  - A vulnerability was found in FreeIPA in a way when a Kerberos TGS-REQ is encrypted using the client's     session key. This key is different for each new session, which protects it from brute force attacks.
    However, the ticket it contains is encrypted using the target principal key directly. For user principals,     this key is a hash of a public per-principal randomly-generated salt and the user's password. If a     principal is compromised it means the attacker would be able to retrieve tickets encrypted to any     principal, all of them being encrypted by their own key directly. By taking these tickets and salts     offline, the attacker could run brute force attacks to find character strings able to decrypt tickets when     combined to a principal salt (i.e. find the principal's password). (CVE-2024-3183)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:9192 advisory.

    Red Hat Identity Management (IdM) is a centralized authentication, identity management, and authorization     solution for both traditional and cloud-based enterprise environments.

    Security Fix(es):

    * freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0546 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2025-4404:
    A privilege escalation from host to domain vulnerability was found in the FreeIPA project. The FreeIPA     package fails to validate the uniqueness of the `krbCanonicalName` for the admin account by default,     allowing users to create services with the same canonical name as the REALM admin. When a successful     attack happens, the user can retrieve a Kerberos ticket in the name of this service, containing the     admin@REALM credential. This flaw allows an attacker to perform administrative tasks over the REALM,     leading to access to sensitive data and sensitive data exfiltration.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 10 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2025:9190 advisory.

    * freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10543:04 advisory.

    * freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2025_9184 advisory.

    * freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9190 advisory.

    - Resolves: RHEL-89908       EMBARGOED CVE-2025-4404 ipa: Privilege escalation from host to domain admin in FreeIPA

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9189 advisory.

    [4.6.8-5.0.3.el7_9.17]
    - Fix privilege escalation from host to domain vulnerability
    - CVE-2025-4404 [Orabug: 38085890]

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:9191 advisory.

    Red Hat Identity Management (IdM) is a centralized authentication, identity management, and authorization     solution for both traditional and cloud-based enterprise environments.

    Security Fix(es):

    * freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9184 advisory.

    - Resolves: RHEL-89908       EMBARGOED CVE-2025-4404 ipa: Privilege escalation from host to domain admin in FreeIPA

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9188 advisory.

    bind-dyndb-ldap     [11.6-6]
    - Fix rpminspect warnings       Resolves: RHEL-22497

    custodia     ipa     [4.9.13-18.0.1]
    - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674]

    [4.9.13-18]
    - Set krbCanonicalName admin@REALM on the admin user       Resolves: RHEL-89895

    [4.9.13-17]
    - kdb: keeep ipadb_get_connection() from succeding with null LDAP context       Resolves: RHEL-58453

    ipa-healthcheck     opendnssec     [2.1.7-2]
    - Don't creat /var/run/opendnssec directory
    - Resolves: RHEL-12163

    python-jwcrypto     python-kdcproxy     [0.4-5.1]
    - Log KDC timeout only once per request       Resolves: RHEL-68634

    python-qrcode     python-yubico     pyusb     slapi-nis     softhsm

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:9184 advisory.

    * freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:9188 advisory.

    * freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10036:01 advisory.

    * freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
269840	AlmaLinux 10 : ipa (ALSA-2025:9190)	Nessus	Alma Linux Local Security Checks	2025/10/9	2025/10/9	critical
353113	AlmaLinux 9.2 [TuxCare] Security Update: ipa-client / ipa-client-common / ipa-client-epn / ipa-client-samba / etc Multiple Vulnerabilities (ALMALINUX9.2:CLSA-2025:1763391572)	Nessus	Alma Linux Local Security Checks	2026/9/30	2026/11/9	high
240135	RHEL 8 : idm:DL1 (RHSA-2025:9192)	Nessus	Red Hat Local Security Checks	2025/6/17	2025/10/9	critical
253496	TencentOS Server 4: freeipa (TSSA-2025:0546)	Nessus	Tencent Local Security Checks	2025/8/21	2025/12/4	critical
266634	RockyLinux 10 : ipa (RLSA-2025:9190)	Nessus	Rocky Linux Local Security Checks	2025/10/6	2025/10/6	critical
282913	MiracleLinux 9 : ipa-4.12.2-14.el9_6.1 (AXSA:2025-10543:04)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/1/13	critical
355190	Rocky Linux 9 [CIQ] Security Update: ipa-client / ipa-client-common / ipa-client-debuginfo / etc (crlsa-2025_9184)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/5	critical
240881	Oracle Linux 10 : ipa (ELSA-2025-9190)	Nessus	Oracle Linux Local Security Checks	2025/6/27	2025/6/27	critical
241497	Oracle Linux 7 : ipa (ELSA-2025-9189)	Nessus	Oracle Linux Local Security Checks	2025/7/7	2025/9/11	critical
240136	RHEL 8 : idm:DL1 (RHSA-2025:9191)	Nessus	Red Hat Local Security Checks	2025/6/17	2025/10/9	critical
240173	Oracle Linux 9 : ipa (ELSA-2025-9184)	Nessus	Oracle Linux Local Security Checks	2025/6/18	2025/6/18	critical
240183	Oracle Linux 8 : idm:DL1 (ELSA-2025-9188)	Nessus	Oracle Linux Local Security Checks	2025/6/19	2025/9/11	critical
240934	AlmaLinux 9 : ipa (ALSA-2025:9184)	Nessus	Alma Linux Local Security Checks	2025/6/30	2025/6/30	critical
240953	AlmaLinux 8 : idm:DL1 (ALSA-2025:9188)	Nessus	Alma Linux Local Security Checks	2025/6/30	2025/6/30	critical
283036	MiracleLinux 8 : idm:DL1 (AXSA:2025-10036:01)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/1/20	critical

偵測

搜尋 Plugin

critical

high

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical