Bug 2402727 (CVE-2025-11561) - CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege escalation on AD-joined Linux systems
Summary: CVE-2025-11561 sssd: SSSD default Kerberos configuration allows privilege esc...
Keywords:
Status: NEW
Alias: CVE-2025-11561
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Product Security DevOps Team
QA Contact:
URL:
Whiteboard:
Depends On: 2402728
Blocks:
TreeView+ depends on / blocked
 
Reported: 2025-10-09 13:20 UTC by OSIDB Bzimport
Modified: 2025-12-03 11:06 UTC (History)
0 users

Fixed In Version:
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2025:19610 0 None None None 2025-11-04 10:23:06 UTC
Red Hat Product Errata RHSA-2025:19847 0 None None None 2025-11-06 02:25:37 UTC
Red Hat Product Errata RHSA-2025:19848 0 None None None 2025-11-06 02:29:28 UTC
Red Hat Product Errata RHSA-2025:19849 0 None None None 2025-11-06 04:51:15 UTC
Red Hat Product Errata RHSA-2025:19850 0 None None None 2025-11-06 02:26:34 UTC
Red Hat Product Errata RHSA-2025:19851 0 None None None 2025-11-06 06:59:26 UTC
Red Hat Product Errata RHSA-2025:19852 0 None None None 2025-11-06 06:32:30 UTC
Red Hat Product Errata RHSA-2025:19853 0 None None None 2025-11-06 03:20:51 UTC
Red Hat Product Errata RHSA-2025:19854 0 None None None 2025-11-06 04:02:19 UTC
Red Hat Product Errata RHSA-2025:19859 0 None None None 2025-11-06 05:11:53 UTC
Red Hat Product Errata RHSA-2025:20954 0 None None None 2025-11-11 14:59:36 UTC
Red Hat Product Errata RHSA-2025:21020 0 None None None 2025-11-11 19:13:24 UTC
Red Hat Product Errata RHSA-2025:21067 0 None None None 2025-11-12 03:11:48 UTC
Red Hat Product Errata RHSA-2025:21329 0 None None None 2025-11-20 07:56:56 UTC
Red Hat Product Errata RHSA-2025:21795 0 None None None 2025-11-27 04:22:37 UTC
Red Hat Product Errata RHSA-2025:22256 0 None None None 2025-12-03 04:55:35 UTC
Red Hat Product Errata RHSA-2025:22265 0 None None None 2025-12-03 10:33:13 UTC
Red Hat Product Errata RHSA-2025:22277 0 None None None 2025-12-03 11:06:15 UTC

Description OSIDB Bzimport 2025-10-09 13:20:47 UTC 
Improper Authorization configuration vulnerability in the System Security Services Daemon (SSSD) when integrated with Microsoft Active Directory. The flaw arises because, by default, the Kerberos local authentication plugin (sssd_krb5_localauth_plugin) is not enabled, allowing incorrect mapping of Kerberos principals to local users. An attacker with the ability to modify Active Directory attributes (userPrincipalName or samAccountName) can impersonate privileged accounts such as root or Administrator. This can lead to privilege escalation on domain-joined Linux systems using GSSAPI or password-based authentication.
Comment 1 errata-xmlrpc 2025-11-04 10:23:05 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8

Via RHSA-2025:19610 https://access.redhat.com/errata/RHSA-2025:19610
Comment 2 errata-xmlrpc 2025-11-06 02:25:37 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 7 Extended Lifecycle Support

Via RHSA-2025:19847 https://access.redhat.com/errata/RHSA-2025:19847
Comment 3 errata-xmlrpc 2025-11-06 02:26:33 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions

Via RHSA-2025:19850 https://access.redhat.com/errata/RHSA-2025:19850
Comment 4 errata-xmlrpc 2025-11-06 02:29:27 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On

Via RHSA-2025:19848 https://access.redhat.com/errata/RHSA-2025:19848
Comment 5 errata-xmlrpc 2025-11-06 03:20:50 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.8 Telecommunications Update Service

Via RHSA-2025:19853 https://access.redhat.com/errata/RHSA-2025:19853
Comment 6 errata-xmlrpc 2025-11-06 04:02:18 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions

Via RHSA-2025:19854 https://access.redhat.com/errata/RHSA-2025:19854
Comment 7 errata-xmlrpc 2025-11-06 04:51:14 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support
  Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions
  Red Hat Enterprise Linux 8.6 Telecommunications Update Service

Via RHSA-2025:19849 https://access.redhat.com/errata/RHSA-2025:19849
Comment 8 errata-xmlrpc 2025-11-06 05:11:53 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 8.2 Advanced Update Support

Via RHSA-2025:19859 https://access.redhat.com/errata/RHSA-2025:19859
Comment 9 errata-xmlrpc 2025-11-06 06:32:29 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.4 Extended Update Support

Via RHSA-2025:19852 https://access.redhat.com/errata/RHSA-2025:19852
Comment 10 errata-xmlrpc 2025-11-06 06:59:25 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2025:19851 https://access.redhat.com/errata/RHSA-2025:19851
Comment 11 errata-xmlrpc 2025-11-11 14:59:35 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9

Via RHSA-2025:20954 https://access.redhat.com/errata/RHSA-2025:20954
Comment 12 errata-xmlrpc 2025-11-11 19:13:23 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 10

Via RHSA-2025:21020 https://access.redhat.com/errata/RHSA-2025:21020
Comment 13 errata-xmlrpc 2025-11-12 03:11:47 UTC 
This issue has been addressed in the following products:

  Red Hat Enterprise Linux 9.6 Extended Update Support

Via RHSA-2025:21067 https://access.redhat.com/errata/RHSA-2025:21067
Comment 14 errata-xmlrpc 2025-11-20 07:56:55 UTC 
This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.14

Via RHSA-2025:21329 https://access.redhat.com/errata/RHSA-2025:21329
Comment 15 errata-xmlrpc 2025-11-27 04:22:36 UTC 
This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.18

Via RHSA-2025:21795 https://access.redhat.com/errata/RHSA-2025:21795
Comment 16 errata-xmlrpc 2025-12-03 04:55:34 UTC 
This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.20

Via RHSA-2025:22256 https://access.redhat.com/errata/RHSA-2025:22256
Comment 17 errata-xmlrpc 2025-12-03 10:33:12 UTC 
This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.17

Via RHSA-2025:22265 https://access.redhat.com/errata/RHSA-2025:22265
Comment 18 errata-xmlrpc 2025-12-03 11:06:14 UTC 
This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.19

Via RHSA-2025:22277 https://access.redhat.com/errata/RHSA-2025:22277
Note You need to log in before you can comment on or make changes to this bug.