CVE Explorer

CVE-2025-7493

A privilege escalation flaw from host to domain administrator was found in FreeIPA. This vulnerability is similar to CVE-2025-4404, where it fails to validate the uniqueness of the krbCanonicalName. While the previously released version added validations for the admin@REALM credential, FreeIPA still does not validate the root@REALM canonical name, which can also be used as the realm administrator's name. This flaw allows an attacker to perform administrative tasks over the REALM, leading to acce

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:b75d5f3012deddddc8cc87f986a49173eda0553d0b4e61c1053351b429b9c530

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 25 assertions

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream"],"defaultStatus":"affected","packageName":"idm:DL1","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8080020250918152850.b0a6ceea","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/19

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:6"],"defaultStatus":"unknown","packageName":"ipa","product":"Red Hat Enterprise Linux 6","vendor":"Red Hat"}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/24

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_tus:8.6::appstream","cpe:/a:redhat:rhel_e4s:8.6::appstream","cpe:/a:redhat:rhel_aus:8.6::appstream"],"defaultStatus":"affected","packageName":"idm:client","product":"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8060020250916172436.c1533a64","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/14

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:9::crb","cpe:/a:redhat:enterprise_linux:9::appstream"],"defaultStatus":"affected","packageName":"ipa","product":"Red Hat Enterprise Linux 9","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.12.2-14.el9_6.5","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/20

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream"],"defaultStatus":"affected","packageName":"idm:DL1","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8080020250918152850.b0a6ceea","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/17

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_aus:8.2::appstream"],"defaultStatus":"affected","packageName":"idm:DL1","product":"Red Hat Enterprise Linux 8.2 Advanced Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8020020250924104944.792f4060","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/5

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/a:redhat:rhel_aus:8.4::appstream"],"defaultStatus":"affected","packageName":"idm:client","product":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8040020250923180004.f153676a","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/8

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_tus:8.6::appstream","cpe:/a:redhat:rhel_e4s:8.6::appstream","cpe:/a:redhat:rhel_aus:8.6::appstream"],"defaultStatus":"affected","packageName":"idm:client","product":"Red Hat Enterprise Linux 8.6 Telecommunications Update Service","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8060020250916172436.c1533a64","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/12

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_tus:8.6::appstream","cpe:/a:redhat:rhel_e4s:8.6::appstream","cpe:/a:redhat:rhel_aus:8.6::appstream"],"defaultStatus":"affected","packageName":"idm:DL1","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8060020250916174421.ada582f1","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/11

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/a:redhat:rhel_aus:8.4::appstream"],"defaultStatus":"affected","packageName":"idm:client","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8040020250923180004.f153676a","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/6

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/a:redhat:rhel_aus:8.4::appstream"],"defaultStatus":"affected","packageName":"idm:DL1","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8040020250923175408.5b01ab7e","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/7

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_tus:8.6::appstream","cpe:/a:redhat:rhel_e4s:8.6::appstream","cpe:/a:redhat:rhel_aus:8.6::appstream"],"defaultStatus":"affected","packageName":"idm:DL1","product":"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8060020250916174421.ada582f1","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/15

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:9.2::appstream"],"defaultStatus":"affected","packageName":"ipa","product":"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.10.1-12.el9_2.6","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/22

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_tus:8.6::appstream","cpe:/a:redhat:rhel_e4s:8.6::appstream","cpe:/a:redhat:rhel_aus:8.6::appstream"],"defaultStatus":"affected","packageName":"idm:client","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8060020250916172436.c1533a64","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/10

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_aus:8.2::appstream"],"defaultStatus":"affected","packageName":"idm:client","product":"Red Hat Enterprise Linux 8.2 Advanced Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8020020250924110056.50ea30f9","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/4

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/a:redhat:rhel_aus:8.4::appstream"],"defaultStatus":"affected","packageName":"idm:DL1","product":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8040020250923175408.5b01ab7e","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/9

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream"],"defaultStatus":"affected","packageName":"idm:client","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8080020250918184739.e581a9e4","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/18

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream"],"defaultStatus":"affected","packageName":"idm:DL1","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8100020250918211722.823393f5","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/3

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:enterprise_linux:10.0"],"defaultStatus":"affected","packageName":"ipa","product":"Red Hat Enterprise Linux 10","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.12.2-15.el10_0.4","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/0

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus:9.4::crb","cpe:/a:redhat:rhel_eus:9.4::appstream"],"defaultStatus":"affected","packageName":"ipa","product":"Red Hat Enterprise Linux 9.4 Extended Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.11.0-15.el9_4.7","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/23

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream"],"defaultStatus":"affected","packageName":"idm:client","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8080020250918184739.e581a9e4","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/16

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream"],"defaultStatus":"affected","packageName":"idm:client","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8100020250919180242.143e9e98","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/2

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:9.0::appstream"],"defaultStatus":"affected","packageName":"ipa","product":"Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.9.8-11.el9_0.5","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/21

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_tus:8.6::appstream","cpe:/a:redhat:rhel_e4s:8.6::appstream","cpe:/a:redhat:rhel_aus:8.6::appstream"],"defaultStatus":"affected","packageName":"idm:DL1","product":"Red Hat Enterprise Linux 8.6 Telecommunications Update Service","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8060020250916174421.ada582f1","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/13

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/o:redhat:rhel_els:7"],"defaultStatus":"affected","packageName":"ipa","product":"Red Hat Enterprise Linux 7 Extended Lifecycle Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"0:4.6.8-5.el7_9.23","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/1

Affected products and versions

25 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/19

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/24

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/14

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/20

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream"],"defaultStatus":"affected","packageName":"idm:DL1","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8080020250918152850.b0a6ceea","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/17

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/5

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/8

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_tus:8.6::appstream","cpe:/a:redhat:rhel_e4s:8.6::appstream","cpe:/a:redhat:rhel_aus:8.6::appstream"],"defaultStatus":"affected","packageName":"idm:client","product":"Red Hat Enterprise Linux 8.6 Telecommunications Update Service","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8060020250916172436.c1533a64","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/12

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_tus:8.6::appstream","cpe:/a:redhat:rhel_e4s:8.6::appstream","cpe:/a:redhat:rhel_aus:8.6::appstream"],"defaultStatus":"affected","packageName":"idm:DL1","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8060020250916174421.ada582f1","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/11

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/a:redhat:rhel_aus:8.4::appstream"],"defaultStatus":"affected","packageName":"idm:client","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8040020250923180004.f153676a","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/6

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/a:redhat:rhel_aus:8.4::appstream"],"defaultStatus":"affected","packageName":"idm:DL1","product":"Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8040020250923175408.5b01ab7e","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/7

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_tus:8.6::appstream","cpe:/a:redhat:rhel_e4s:8.6::appstream","cpe:/a:redhat:rhel_aus:8.6::appstream"],"defaultStatus":"affected","packageName":"idm:DL1","product":"Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8060020250916174421.ada582f1","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/15

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/22

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_tus:8.6::appstream","cpe:/a:redhat:rhel_e4s:8.6::appstream","cpe:/a:redhat:rhel_aus:8.6::appstream"],"defaultStatus":"affected","packageName":"idm:client","product":"Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8060020250916172436.c1533a64","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/10

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_aus:8.2::appstream"],"defaultStatus":"affected","packageName":"idm:client","product":"Red Hat Enterprise Linux 8.2 Advanced Update Support","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8020020250924110056.50ea30f9","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/4

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_eus_long_life:8.4::appstream","cpe:/a:redhat:rhel_aus:8.4::appstream"],"defaultStatus":"affected","packageName":"idm:DL1","product":"Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8040020250923175408.5b01ab7e","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/9

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream"],"defaultStatus":"affected","packageName":"idm:client","product":"Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8080020250918184739.e581a9e4","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/18

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/3

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/0

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/23

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_e4s:8.8::appstream","cpe:/a:redhat:rhel_tus:8.8::appstream"],"defaultStatus":"affected","packageName":"idm:client","product":"Red Hat Enterprise Linux 8.8 Telecommunications Update Service","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8080020250918184739.e581a9e4","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/16

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:enterprise_linux:8::appstream"],"defaultStatus":"affected","packageName":"idm:client","product":"Red Hat Enterprise Linux 8","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8100020250919180242.143e9e98","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/2

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/21

{"collectionURL":"https://access.redhat.com/downloads/content/package-browser/","cpes":["cpe:/a:redhat:rhel_tus:8.6::appstream","cpe:/a:redhat:rhel_e4s:8.6::appstream","cpe:/a:redhat:rhel_aus:8.6::appstream"],"defaultStatus":"affected","packageName":"idm:DL1","product":"Red Hat Enterprise Linux 8.6 Telecommunications Update Service","vendor":"Red Hat","versions":[{"lessThan":"*","status":"unaffected","version":"8060020250916174421.ada582f1","versionType":"rpm"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/13

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/affected/1

Provider-owned CVSS observations

1 source assertion

{"metric":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.1,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}

cve_program_cvelist_v5cvss
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/metrics/1/cvssV3_1

CWE assertions

1 source assertion

{"cweId":"CWE-1220","description":"Insufficient Granularity of Access Control","lang":"en","type":"CWE"}

cve_program_cvelist_v5cwe
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/problemTypes/0/descriptions/0

Source references

14 source assertions

{"url":"http://www.openwall.com/lists/oss-security/2025/09/30/6"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/adp/1/references/0

{"name":"RHSA-2025:17084","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2025:17084"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/references/0

{"name":"RHSA-2025:17085","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2025:17085"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/references/1

{"name":"RHSA-2025:17086","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2025:17086"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/references/2

{"name":"RHSA-2025:17087","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2025:17087"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/references/3

{"name":"RHSA-2025:17088","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2025:17088"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/references/4

{"name":"RHSA-2025:17129","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2025:17129"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/references/5

{"name":"RHSA-2025:17645","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2025:17645"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/references/6

{"name":"RHSA-2025:17646","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2025:17646"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/references/7

{"name":"RHSA-2025:17647","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2025:17647"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/references/8

{"name":"RHSA-2025:17648","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2025:17648"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/references/9

{"name":"RHSA-2025:17649","tags":["vendor-advisory","x_refsource_REDHAT"],"url":"https://access.redhat.com/errata/RHSA-2025:17649"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/references/10

{"tags":["vdb-entry","x_refsource_REDHAT"],"url":"https://access.redhat.com/security/cve/CVE-2025-7493"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/references/11

{"name":"RHBZ#2389448","tags":["issue-tracking","x_refsource_REDHAT"],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2389448"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:a9d7e26a2916f1419d91f8a992d1f26c143aeecdebf208eca493e5d2f1070723 · sha256:27104c7a399f7287… · /containers/cna/references/12

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer