FreeIPA 4.4.0 allows remote malicious users to request an arbitrary SAN name for services.
freeipa freeipa 4.4.0