Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:6473
HistoryJun 01, 2018 - 10:25 a.m.

Authentication Bypass

2018-06-0110:25:51
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8

0.002 Low

EPSS

Percentile

58.8%

libkrb5.so is vulnerable to authentication bypasses. A malicious user can pass a forged krb cert with the right EKU when no SANs is used as no relationship is established between a user and the certificate.