Aker

Aker SSH Gateway Aker란 무엇인가? Aker는 자체 Linux SSH 점프/배스천 호스트를 구성하는 데 도움을 주는 보안 도구입니다. 이집트 신화에서 경계를 지키는 신의 이름을 따서 명명된 Aker는 모든 시스템 관리자와 지원 직원이 Linux 프로덕션 서버에 액세스할 때 통과해야 하는 병목 지점 역할을 합니다. Aker SSH 게이트웨이는 수천 대의 Linux 서버를 쉽게 관리하고 관리할 수 있도록 도와주는 많은 보안 기능을 포함하고 있습니다. 자세한 내용은 Wiki를 확인하세요. 동기 CryptoAudito...

CVE-2024-3183-POC

CVE-2024-3183-POC CVE-2024-3183 FreeIPA Rosting에 대한 POC 영향: 저권한 사용자가 모든 도메인 사용자의 비밀번호 해시를 획득하고 오프라인 무차별 대입 공격kerberoasting을 수행할 수 있습니다. impacket-getTGT 패치: 1. impacket/krb5/kerberosv5.py에 decoder.decode.defaultErrorState = stGetValueDecoderByTag를 추가합니다. 2. 즐기세요! POC1: 1...

FreeIPA - XML Entity Injection

Access to external entities when parsing XML documents can lead to XML external entity XXE attacks. This flaw allows a remote attacker to potentially retrieve the content of arbitrary files by sending specially crafted HTTP requests. id: CVE-2022-2414 info: name: FreeIPA - XML Entity Injection...

CVE-2025-4404-POC

CVE-2025-4404 POC CVE-2025-4404에 대한 POC 도메인 컴퓨터 계정host/[email protected]이 있다면, 기본적으로 서비스를 추가할 수 있습니다. 그리고 krbPrincipalName과 krbCanonicalName을 설정할 수 있습니다. 기본적으로 FreeIPA 4.12.4 관리자 계정에는 krbCanonicalName 속성 값이 없습니다. krbPrincipalName 값을 사용하여 Kerberos 티켓을 요청할 수 있지만, 티켓에는 krbCanonicalName 값이...

CVE-2022-2414-POC

CVE-2022-2414-POC 解析 XML 文档时访问外部实体可能导致 XML 外部实体 XXE 攻击。此缺陷允许远程攻击者通过发送特制的 HTTP 请求来潜在地检索任意文件的内容。（确实如此……“可能”已确认） https://portswigger.net/daily-swig/vulnerability-in-open-source-identity-management-system-free-ipa-could-lead-to-xxe-attacks...

freeipa

FreeIPA 서버 FreeIPA를 사용하면 Linux 관리자가 Linux 및 UNIX 시스템의 ID, 인증 및 액세스 제어 측면을 중앙에서 관리할 수 있으며, 설치와 사용이 간편한 명령줄 및 웹 기반 관리 도구를 제공합니다. FreeIPA는 잘 알려진 오픈 소스 구성 요소와 표준 프로토콜을 기반으로 구축되었으며, 관리 용이성과 설치 및 구성 작업의 자동화에 매우 중점을 둡니다. FreeIPA는 cross-realm Kerberos 트러스트 또는 사용자 동기화를 통해 Active Directory 환경에 원활하게 통합될 수...

UBUNTU-CVE-2026-13097

A privilege escalation flaw was found in FreeIPA. The uniqueness const...

UBUNTU-CVE-2026-73196

A flaw was found in FreeIPA. A low-privilege authenticated user can ex...

UBUNTU-CVE-2026-73198

A flaw was found in FreeIPA. A remote, unauthenticated attacker can ex...

UBUNTU-CVE-2026-73197

A flaw was found in FreeIPA. A remote, unauthenticated attacker can ex...

UBUNTU-CVE-2026-11861

A flaw was found in FreeIPA. When a trust relationship is configured b...

CVE-2026-73198

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit a vulnerability in the /ipa/i18nmessages endpoint by sending an arbitrarily large request body. This can cause the service to consume excessive memory, leading to memory exhaustion, degraded responsiveness, and a denial o...

CVE-2026-73197

A flaw was found in FreeIPA. A remote, unauthenticated attacker can exploit this vulnerability by sending oversized form POST requests to the /ipa/migration/migration.py endpoint. This can force the migration handler to read attacker-controlled request bodies fully into memory, leading to increas...

CVE-2026-73196

A flaw was found in FreeIPA. A low-privilege authenticated user can exploit this vulnerability by submitting an oversized One-Time Password OTP key value. This oversized key is then decoded and re-encoded without proper size limits, consuming excessive CPU and memory resources. This can lead to a...

DEBIAN-CVE-2026-13097

A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations of the same principal name, allowing a user with sufficient LDAP write privileges to...

CVE-2026-13097

A privilege escalation flaw was found in FreeIPA. The uniqueness constraint enforced on Kerberos principal name attributes in the 389-ds directory server does not properly account for equivalent representations of the same principal name, allowing a user with sufficient LDAP write privileges to...

CVE-2026-11861

A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket...

CVE-2026-73199 Ipa: freeipa: null pointer dereference in `ipa-enrollment` extended operation (`join_oid`) via missing request value

A flaw was found in the ipa-enrollment SLAPI plugin. A remote authenticated client can exploit a null pointer dereference vulnerability by sending a malformed Lightweight Directory Access Protocol LDAP extended operation. By omitting the request value for the JOINOID in the ipa-enrollment extende...

CVE-2026-73199 Ipa: freeipa: null pointer dereference in `ipa-enrollment` extended operation (`join_oid`) via missing request value

A flaw was found in the ipa-enrollment SLAPI plugin. A remote authenticated client can exploit a null pointer dereference vulnerability by sending a malformed Lightweight Directory Access Protocol LDAP extended operation. By omitting the request value for the JOINOID in the ipa-enrollment extende...

CVE-2026-11861

A flaw was found in FreeIPA. When a trust relationship is configured between FreeIPA and Active Directory, Active Directory users can bypass authentication for FreeIPA services, including the portal, SMB server, and LDAP directory. This is possible by impersonating a client name in the Ticket...