Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
System Security Services Daemon (SSSD) before 1.0.1, when the krb5 auth_provider is configured but the KDC is unreachable, allows physically proximate attackers to authenticate, via an arbitrary password, to the screen-locking program on a workstation that has any user's Kerberos ticket-granting ticket (TGT); and might allow remote attackers to bypass intended access restrictions via vectors involving an arbitrary password in conjunction with a valid TGT.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Fedoraproject System Security Services Daemon krb5 auth_providerKDC信息安全绕过漏洞
Vulnerability Description
System Security Services Daemon (SSSD) 1.0.1版本的以前版本, 在krb5 auth_provider被允许调试而KDC信息不可达时，附近的攻击者可以借助任意一个密码，在一个具有任意用户的麻省理工学院开发的票据授予票据安全认证系统上进行屏幕锁定；并可能允许远程攻击者借助包括任意密码和有效TGT的向量，绕过预设访问限制。
CVSS Information
N/A
Vulnerability Type
N/A