Tag
#kerberos
2 stories taggedkerberos.

Vulnerabilities
FreeIPA Bug Lets Unknown Users Mint Themselves Admin Accounts
A two-flaw chain in Red Hat's identity system lets an anonymous client create a Kerberos account and land in the administrators group with no credentials required.
4 min read

Vulnerabilities
Certighost: New Exploit Turns Ordinary Windows Users Into Domain Controllers
A public proof-of-concept lets any low-privileged Active Directory account impersonate a domain controller and retrieve the master key to every user's login on the network.
3 min read