CVE-2025-7493 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2025-7493 Interim 1 1 2025-10-04T23:36:44Z current 2025-10-04T23:36:44Z 2025-10-04T23:36:44Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2025-7493 A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential, FreeIPA still does not validate the root@REALM canonical name, which can also be used as the realm administrator's name. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/suse-liberty-linux-updates/2025-October/002053.html E-Mail link for ESSA-2025:3454 https://lists.suse.com/pipermail/suse-liberty-linux-updates/2025-October/002054.html E-Mail link for ESSA-2025:3455 https://lists.suse.com/pipermail/suse-liberty-linux-updates/2025-October/002051.html E-Mail link for RHSA-2025:17084 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Liberty Linux 8 SUSE Liberty Linux 9 bind-dyndb-ldap-11.6-6.module+el8.10.0+23009+91fb337e custodia-0.6.0-3.module+el8.9.0+18911+94941f82 ipa-client-4.12.2-14.el9_6.5 ipa-client-4.9.13-20.module+el8.10.0+23537+32c82745 ipa-client-common-4.12.2-14.el9_6.5 ipa-client-common-4.9.13-20.module+el8.10.0+23537+32c82745 ipa-client-encrypted-dns-4.12.2-14.el9_6.5 ipa-client-epn-4.12.2-14.el9_6.5 ipa-client-epn-4.9.13-20.module+el8.10.0+23537+32c82745 ipa-client-samba-4.12.2-14.el9_6.5 ipa-client-samba-4.9.13-20.module+el8.10.0+23537+32c82745 ipa-common-4.12.2-14.el9_6.5 ipa-common-4.9.13-20.module+el8.10.0+23537+32c82745 ipa-healthcheck-0.12-6.module+el8.10.0+23403+cc1f9b40 ipa-healthcheck-core-0.12-6.module+el8.10.0+23404+f6b3454f ipa-python-compat-4.9.13-20.module+el8.10.0+23537+32c82745 ipa-selinux-4.12.2-14.el9_6.5 ipa-selinux-4.9.13-20.module+el8.10.0+23537+32c82745 ipa-selinux-luna-4.12.2-14.el9_6.5 ipa-selinux-nfast-4.12.2-14.el9_6.5 ipa-server-4.12.2-14.el9_6.5 ipa-server-4.9.13-20.module+el8.10.0+23534+744f3864 ipa-server-common-4.12.2-14.el9_6.5 ipa-server-common-4.9.13-20.module+el8.10.0+23534+744f3864 ipa-server-dns-4.12.2-14.el9_6.5 ipa-server-dns-4.9.13-20.module+el8.10.0+23534+744f3864 ipa-server-encrypted-dns-4.12.2-14.el9_6.5 ipa-server-trust-ad-4.12.2-14.el9_6.5 ipa-server-trust-ad-4.9.13-20.module+el8.10.0+23534+744f3864 opendnssec-2.1.7-2.module+el8.10.0+22913+7aa1a207 python3-custodia-0.6.0-3.module+el8.9.0+18911+94941f82 python3-ipaclient-4.12.2-14.el9_6.5 python3-ipaclient-4.9.13-20.module+el8.10.0+23537+32c82745 python3-ipalib-4.12.2-14.el9_6.5 python3-ipalib-4.9.13-20.module+el8.10.0+23537+32c82745 python3-ipaserver-4.12.2-14.el9_6.5 python3-ipaserver-4.9.13-20.module+el8.10.0+23534+744f3864 python3-ipatests-4.12.2-14.el9_6.5 python3-ipatests-4.9.13-20.module+el8.10.0+23534+744f3864 python3-jwcrypto-0.5.0-2.module+el8.10.0+21692+c9b201bc python3-kdcproxy-0.4-5.module+el8.10.0+22564+098ba143.1 python3-pyusb-1.0.0-9.1.module+el8.9.0+18920+2223d05e python3-qrcode-5.3-1.module+el8.10.0+22544+6a7f07c2 python3-qrcode-core-5.3-1.module+el8.10.0+22544+6a7f07c2 python3-yubico-1.3.2-9.1.module+el8.9.0+18920+2223d05e slapi-nis-0.60.0-4.module+el8.10.0+20723+03062ebd softhsm-2.6.0-5.module+el8.9.0+18911+94941f82 softhsm-devel-2.6.0-5.module+el8.9.0+18911+94941f82 bind-dyndb-ldap-11.6-6.module+el8.10.0+23009+91fb337e as a component of SUSE Liberty Linux 8 custodia-0.6.0-3.module+el8.9.0+18911+94941f82 as a component of SUSE Liberty Linux 8 ipa-client-4.9.13-20.module+el8.10.0+23537+32c82745 as a component of SUSE Liberty Linux 8 ipa-client-common-4.9.13-20.module+el8.10.0+23537+32c82745 as a component of SUSE Liberty Linux 8 ipa-client-epn-4.9.13-20.module+el8.10.0+23537+32c82745 as a component of SUSE Liberty Linux 8 ipa-client-samba-4.9.13-20.module+el8.10.0+23537+32c82745 as a component of SUSE Liberty Linux 8 ipa-common-4.9.13-20.module+el8.10.0+23537+32c82745 as a component of SUSE Liberty Linux 8 ipa-healthcheck-0.12-6.module+el8.10.0+23403+cc1f9b40 as a component of SUSE Liberty Linux 8 ipa-healthcheck-core-0.12-6.module+el8.10.0+23404+f6b3454f as a component of SUSE Liberty Linux 8 ipa-python-compat-4.9.13-20.module+el8.10.0+23537+32c82745 as a component of SUSE Liberty Linux 8 ipa-selinux-4.9.13-20.module+el8.10.0+23537+32c82745 as a component of SUSE Liberty Linux 8 ipa-server-4.9.13-20.module+el8.10.0+23534+744f3864 as a component of SUSE Liberty Linux 8 ipa-server-common-4.9.13-20.module+el8.10.0+23534+744f3864 as a component of SUSE Liberty Linux 8 ipa-server-dns-4.9.13-20.module+el8.10.0+23534+744f3864 as a component of SUSE Liberty Linux 8 ipa-server-trust-ad-4.9.13-20.module+el8.10.0+23534+744f3864 as a component of SUSE Liberty Linux 8 opendnssec-2.1.7-2.module+el8.10.0+22913+7aa1a207 as a component of SUSE Liberty Linux 8 python3-custodia-0.6.0-3.module+el8.9.0+18911+94941f82 as a component of SUSE Liberty Linux 8 python3-ipaclient-4.9.13-20.module+el8.10.0+23537+32c82745 as a component of SUSE Liberty Linux 8 python3-ipalib-4.9.13-20.module+el8.10.0+23537+32c82745 as a component of SUSE Liberty Linux 8 python3-ipaserver-4.9.13-20.module+el8.10.0+23534+744f3864 as a component of SUSE Liberty Linux 8 python3-ipatests-4.9.13-20.module+el8.10.0+23534+744f3864 as a component of SUSE Liberty Linux 8 python3-jwcrypto-0.5.0-2.module+el8.10.0+21692+c9b201bc as a component of SUSE Liberty Linux 8 python3-kdcproxy-0.4-5.module+el8.10.0+22564+098ba143.1 as a component of SUSE Liberty Linux 8 python3-pyusb-1.0.0-9.1.module+el8.9.0+18920+2223d05e as a component of SUSE Liberty Linux 8 python3-qrcode-5.3-1.module+el8.10.0+22544+6a7f07c2 as a component of SUSE Liberty Linux 8 python3-qrcode-core-5.3-1.module+el8.10.0+22544+6a7f07c2 as a component of SUSE Liberty Linux 8 python3-yubico-1.3.2-9.1.module+el8.9.0+18920+2223d05e as a component of SUSE Liberty Linux 8 slapi-nis-0.60.0-4.module+el8.10.0+20723+03062ebd as a component of SUSE Liberty Linux 8 softhsm-2.6.0-5.module+el8.9.0+18911+94941f82 as a component of SUSE Liberty Linux 8 softhsm-devel-2.6.0-5.module+el8.9.0+18911+94941f82 as a component of SUSE Liberty Linux 8 ipa-client-4.12.2-14.el9_6.5 as a component of SUSE Liberty Linux 9 ipa-client-common-4.12.2-14.el9_6.5 as a component of SUSE Liberty Linux 9 ipa-client-encrypted-dns-4.12.2-14.el9_6.5 as a component of SUSE Liberty Linux 9 ipa-client-epn-4.12.2-14.el9_6.5 as a component of SUSE Liberty Linux 9 ipa-client-samba-4.12.2-14.el9_6.5 as a component of SUSE Liberty Linux 9 ipa-common-4.12.2-14.el9_6.5 as a component of SUSE Liberty Linux 9 ipa-selinux-4.12.2-14.el9_6.5 as a component of SUSE Liberty Linux 9 ipa-selinux-luna-4.12.2-14.el9_6.5 as a component of SUSE Liberty Linux 9 ipa-selinux-nfast-4.12.2-14.el9_6.5 as a component of SUSE Liberty Linux 9 ipa-server-4.12.2-14.el9_6.5 as a component of SUSE Liberty Linux 9 ipa-server-common-4.12.2-14.el9_6.5 as a component of SUSE Liberty Linux 9 ipa-server-dns-4.12.2-14.el9_6.5 as a component of SUSE Liberty Linux 9 ipa-server-encrypted-dns-4.12.2-14.el9_6.5 as a component of SUSE Liberty Linux 9 ipa-server-trust-ad-4.12.2-14.el9_6.5 as a component of SUSE Liberty Linux 9 python3-ipaclient-4.12.2-14.el9_6.5 as a component of SUSE Liberty Linux 9 python3-ipalib-4.12.2-14.el9_6.5 as a component of SUSE Liberty Linux 9 python3-ipaserver-4.12.2-14.el9_6.5 as a component of SUSE Liberty Linux 9 python3-ipatests-4.12.2-14.el9_6.5 as a component of SUSE Liberty Linux 9 A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential, FreeIPA still does not validate the root@REALM canonical name, which can also be used as the realm administrator's name. This flaw allows an attacker to perform administrative tasks over the REALM, leading to access to sensitive data and sensitive data exfiltration. CVE-2025-7493 SUSE Liberty Linux 8:bind-dyndb-ldap-11.6-6.module+el8.10.0+23009+91fb337e SUSE Liberty Linux 8:custodia-0.6.0-3.module+el8.9.0+18911+94941f82 SUSE Liberty Linux 8:ipa-client-4.9.13-20.module+el8.10.0+23537+32c82745 SUSE Liberty Linux 8:ipa-client-common-4.9.13-20.module+el8.10.0+23537+32c82745 SUSE Liberty Linux 8:ipa-client-epn-4.9.13-20.module+el8.10.0+23537+32c82745 SUSE Liberty Linux 8:ipa-client-samba-4.9.13-20.module+el8.10.0+23537+32c82745 SUSE Liberty Linux 8:ipa-common-4.9.13-20.module+el8.10.0+23537+32c82745 SUSE Liberty Linux 8:ipa-healthcheck-0.12-6.module+el8.10.0+23403+cc1f9b40 SUSE Liberty Linux 8:ipa-healthcheck-core-0.12-6.module+el8.10.0+23404+f6b3454f SUSE Liberty Linux 8:ipa-python-compat-4.9.13-20.module+el8.10.0+23537+32c82745 SUSE Liberty Linux 8:ipa-selinux-4.9.13-20.module+el8.10.0+23537+32c82745 SUSE Liberty Linux 8:ipa-server-4.9.13-20.module+el8.10.0+23534+744f3864 SUSE Liberty Linux 8:ipa-server-common-4.9.13-20.module+el8.10.0+23534+744f3864 SUSE Liberty Linux 8:ipa-server-dns-4.9.13-20.module+el8.10.0+23534+744f3864 SUSE Liberty Linux 8:ipa-server-trust-ad-4.9.13-20.module+el8.10.0+23534+744f3864 SUSE Liberty Linux 8:opendnssec-2.1.7-2.module+el8.10.0+22913+7aa1a207 SUSE Liberty Linux 8:python3-custodia-0.6.0-3.module+el8.9.0+18911+94941f82 SUSE Liberty Linux 8:python3-ipaclient-4.9.13-20.module+el8.10.0+23537+32c82745 SUSE Liberty Linux 8:python3-ipalib-4.9.13-20.module+el8.10.0+23537+32c82745 SUSE Liberty Linux 8:python3-ipaserver-4.9.13-20.module+el8.10.0+23534+744f3864 SUSE Liberty Linux 8:python3-ipatests-4.9.13-20.module+el8.10.0+23534+744f3864 SUSE Liberty Linux 8:python3-jwcrypto-0.5.0-2.module+el8.10.0+21692+c9b201bc SUSE Liberty Linux 8:python3-kdcproxy-0.4-5.module+el8.10.0+22564+098ba143.1 SUSE Liberty Linux 8:python3-pyusb-1.0.0-9.1.module+el8.9.0+18920+2223d05e SUSE Liberty Linux 8:python3-qrcode-5.3-1.module+el8.10.0+22544+6a7f07c2 SUSE Liberty Linux 8:python3-qrcode-core-5.3-1.module+el8.10.0+22544+6a7f07c2 SUSE Liberty Linux 8:python3-yubico-1.3.2-9.1.module+el8.9.0+18920+2223d05e SUSE Liberty Linux 8:slapi-nis-0.60.0-4.module+el8.10.0+20723+03062ebd SUSE Liberty Linux 8:softhsm-2.6.0-5.module+el8.9.0+18911+94941f82 SUSE Liberty Linux 8:softhsm-devel-2.6.0-5.module+el8.9.0+18911+94941f82 SUSE Liberty Linux 9:ipa-client-4.12.2-14.el9_6.5 SUSE Liberty Linux 9:ipa-client-common-4.12.2-14.el9_6.5 SUSE Liberty Linux 9:ipa-client-encrypted-dns-4.12.2-14.el9_6.5 SUSE Liberty Linux 9:ipa-client-epn-4.12.2-14.el9_6.5 SUSE Liberty Linux 9:ipa-client-samba-4.12.2-14.el9_6.5 SUSE Liberty Linux 9:ipa-common-4.12.2-14.el9_6.5 SUSE Liberty Linux 9:ipa-selinux-4.12.2-14.el9_6.5 SUSE Liberty Linux 9:ipa-selinux-luna-4.12.2-14.el9_6.5 SUSE Liberty Linux 9:ipa-selinux-nfast-4.12.2-14.el9_6.5 SUSE Liberty Linux 9:ipa-server-4.12.2-14.el9_6.5 SUSE Liberty Linux 9:ipa-server-common-4.12.2-14.el9_6.5 SUSE Liberty Linux 9:ipa-server-dns-4.12.2-14.el9_6.5 SUSE Liberty Linux 9:ipa-server-encrypted-dns-4.12.2-14.el9_6.5 SUSE Liberty Linux 9:ipa-server-trust-ad-4.12.2-14.el9_6.5 SUSE Liberty Linux 9:python3-ipaclient-4.12.2-14.el9_6.5 SUSE Liberty Linux 9:python3-ipalib-4.12.2-14.el9_6.5 SUSE Liberty Linux 9:python3-ipaserver-4.12.2-14.el9_6.5 SUSE Liberty Linux 9:python3-ipatests-4.12.2-14.el9_6.5 critical