Is CVE-2024-2698 being actively exploited?

It is not currently in CISA's KEV catalog. Its EPSS exploitation probability is 1%.

What products does CVE-2024-2698 affect?

Tracked products affected include Red Hat Enterprise Linux, FreeIPA. Check the version you run to see whether it is affected.

How do I fix CVE-2024-2698?

Apply the vendor fix promptly. Upgrade affected products to a fixed version.

← All products

CVE-2024-2698

Q: What is CVE-2024-2698?

CVE-2024-2698 is a high-severity software vulnerability (Incorrect authorization) with a CVSS score of 8.8. A vulnerability was found in FreeIPA in how the initial implementation of MS-SFU by MIT Kerberos was missing a condition for granting the "forwardable" flag on S4U2Self tickets. Fixing this mistake required adding a special case for the che

HIGH severity · CVSS 8.8 · Incorrect authorization

8.8CVSS HIGH

Summary

A vulnerability was found in FreeIPA in how the initial implementation of MS-SFU by MIT Kerberos was missing a condition for granting the "forwardable" flag on S4U2Self tickets. Fixing this mistake required adding a special case for the check_allowed_to_delegate() function: If the target service argument is NULL, then it means the KDC is probing for general constrained delegation rules and not checking a specific S4U2Proxy request. In FreeIPA 4.11.0, the behavior of ipadb_match_acl() was modified to match the changes from upstream MIT Kerberos 1.20. However, a mistake resulting in this mechanism applies in cases where the target service argument is set AND where it is unset. This results in S4U2Proxy requests being accepted regardless of whether or not there is a matching service delegation rule.

Impact & exploitability

Attack vectorNetwork

Attack complexityLow

Privileges requiredLow

User interactionNone

Confidentiality impactHigh

Integrity impactHigh

Availability impactHigh

Exploit probability (EPSS)1%

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products we track (2)

Red Hat Enterprise Linux FreeIPA

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

CVE-2024-2698

Summary

Impact & exploitability

Affected products we track (2)

Recommendation

Additional information