CVE-2024-2698

CVE-2024-2698 is a high-severity vulnerability in FreeIPA, affecting versions 4.11.0 and later, as well as associated Red Hat Enterprise Linux products. It stems from an incorrect implementation of the MS-SFU protocol, allowing S4U2Proxy requests to be accepted even without proper service delegation rules. This flaw enables an authenticated attacker to bypass security controls, potentially leading to full compromise of confidentiality, integrity, and availability. While the CVSS score is 8.8, there is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.