ID:10426 - Exploit for Use of Password Hash With Insufficient Computational Effort in FreeIPA - CVE-2024-3183

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to gain access to sensitive information.

The vulnerability exists due to software uses principal key to encrypt tickets. A remote attacker can brute-force the principal key and decrypt communication between KDC and the client.

Remediation