FreeIPA flaw chain lets unauthenticated attackers create reusable administrator credentials

A newly disclosed FreeIPA vulnerability chain can let an outsider create administrator-level credentials without first logging in. The issue affects FreeIPA identity-management deployments and involves chaining multiple weaknesses that allow anonymous clients to mint reusable admin access; the article describes an authentication and privilege-escalation path affecting organizations that rely on FreeIPA for centralized identity and access control.