The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:9193 advisory.

    Red Hat Identity Management (IdM) is a centralized authentication, identity management, and authorization     solution for both traditional and cloud-based enterprise environments.

    Security Fix(es):

    * freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:9188 advisory.

    Red Hat Identity Management (IdM) is a centralized authentication, identity management, and authorization     solution for both traditional and cloud-based enterprise environments.

    Security Fix(es):

    * freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:9194 advisory.

    Red Hat Identity Management (IdM) is a centralized authentication, identity management, and authorization     solution for both traditional and cloud-based enterprise environments.

    Security Fix(es):

    * freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:9184 advisory.

    Red Hat Identity Management (IdM) is a centralized authentication, identity management, and authorization     solution for both traditional and cloud-based enterprise environments.

    Security Fix(es):

    * freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2025-2901 advisory.

    A privilege escalation from host to domain vulnerability was found in the FreeIPA project. The FreeIPA     package fails to validate the uniqueness of the `krbCanonicalName` for the admin account by default,     allowing users to create services with the same canonical name as the REALM admin. When a successful     attack happens, the user can retrieve a Kerberos ticket in the name of this service, containing the     admin@REALM credential. This flaw allows an attacker to perform administrative tasks over the REALM,     leading to access to sensitive data and sensitive data exfiltration. (CVE-2025-4404)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0505 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2025-4404:
    A privilege escalation from host to domain vulnerability was found in the FreeIPA project. The FreeIPA     package fails to validate the uniqueness of the krbCanonicalName for the admin account by default,     allowing users to create services with the same canonical name as the REALM admin. When a successful     attack happens, the user can retrieve a Kerberos ticket in the name of this service, containing the     admin@REALM credential. This flaw allows an attacker to perform administrative tasks over the REALM,     leading to access to sensitive data and sensitive data exfiltration.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A privilege escalation from host to domain vulnerability was found in the FreeIPA project. The FreeIPA     package fails to validate the uniqueness of the `krbCanonicalName` for the admin account by default,     allowing users to create services with the same canonical name as the REALM admin. When a successful     attack happens, the user can retrieve a Kerberos ticket in the name of this service, containing the     admin@REALM credential. This flaw allows an attacker to perform administrative tasks over the REALM,     leading to access to sensitive data and sensitive data exfiltration. (CVE-2025-4404)

Note that Nessus relies on the presence of the package as reported by the vendor.

The Rocky Linux 10.0 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2025_9190 advisory.

    * freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2025_9188 advisory.

    * freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:9191 advisory.

    Red Hat Identity Management (IdM) is a centralized authentication, identity management, and authorization     solution for both traditional and cloud-based enterprise environments.

    Security Fix(es):

    * freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9184 advisory.

    - Resolves: RHEL-89908       EMBARGOED CVE-2025-4404 ipa: Privilege escalation from host to domain admin in FreeIPA

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-9188 advisory.

    bind-dyndb-ldap     [11.6-6]
    - Fix rpminspect warnings       Resolves: RHEL-22497

    custodia     ipa     [4.9.13-18.0.1]
    - Set IPAPLATFORM=rhel when build on Oracle Linux [Orabug: 29516674]

    [4.9.13-18]
    - Set krbCanonicalName admin@REALM on the admin user       Resolves: RHEL-89895

    [4.9.13-17]
    - kdb: keeep ipadb_get_connection() from succeding with null LDAP context       Resolves: RHEL-58453

    ipa-healthcheck     opendnssec     [2.1.7-2]
    - Don't creat /var/run/opendnssec directory
    - Resolves: RHEL-12163

    python-jwcrypto     python-kdcproxy     [0.4-5.1]
    - Log KDC timeout only once per request       Resolves: RHEL-68634

    python-qrcode     python-yubico     pyusb     slapi-nis     softhsm

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:9184 advisory.

    * freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:9188 advisory.

    * freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2025-10036:01 advisory.

    * freeIPA: idm: Privilege escalation from host to domain admin in FreeIPA (CVE-2025-4404)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
240126	RHEL 8 : idm:client (RHSA-2025:9193)	Nessus	Red Hat Local Security Checks	2025/6/17	2025/10/9	critical
240127	RHEL 8 : idm:DL1 (RHSA-2025:9188)	Nessus	Red Hat Local Security Checks	2025/6/17	2025/10/9	critical
240130	RHEL 8 : idm:DL1 (RHSA-2025:9194)	Nessus	Red Hat Local Security Checks	2025/6/17	2025/10/9	critical
240138	RHEL 9 : ipa (RHSA-2025:9184)	Nessus	Red Hat Local Security Checks	2025/6/17	2025/10/9	critical
240456	Amazon Linux 2 : ipa (ALAS-2025-2901)	Nessus	Amazon Linux Local Security Checks	2025/6/25	2025/6/25	critical
241470	TencentOS Server 3: idm:DL1 (TSSA-2025:0505)	Nessus	Tencent Local Security Checks	2025/7/7	2025/12/4	critical
251953	Linux Distros Unpatched Vulnerability : CVE-2025-4404	Nessus	Misc.	2025/8/19	2026/6/28	critical
353890	Rocky Linux 10.0 [CIQ] Security Update: ipa-client / ipa-client-common / ipa-client-debuginfo / etc (crlsa-2025_9190)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/5	critical
354707	Rocky Linux 8 [CIQ] Security Update: bind-dyndb-ldap / bind-dyndb-ldap-debuginfo / etc (crlsa-2025_9188)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/5	critical
240136	RHEL 8 : idm:DL1 (RHSA-2025:9191)	Nessus	Red Hat Local Security Checks	2025/6/17	2025/10/9	critical
240173	Oracle Linux 9 : ipa (ELSA-2025-9184)	Nessus	Oracle Linux Local Security Checks	2025/6/18	2025/6/18	critical
240183	Oracle Linux 8 : idm:DL1 (ELSA-2025-9188)	Nessus	Oracle Linux Local Security Checks	2025/6/19	2025/9/11	critical
240934	AlmaLinux 9 : ipa (ALSA-2025:9184)	Nessus	Alma Linux Local Security Checks	2025/6/30	2025/6/30	critical
240953	AlmaLinux 8 : idm:DL1 (ALSA-2025:9188)	Nessus	Alma Linux Local Security Checks	2025/6/30	2025/6/30	critical
283036	MiracleLinux 8 : idm:DL1 (AXSA:2025-10036:01)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/1/20	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical