Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1 handled the validation of client certificates. A remote attacker able to communicate with the KDC could potentially use this flaw to impersonate arbitrary principals under rare and erroneous circumstances.
CVSS Information
N/A
Vulnerability Type
证书验证不恰当
Vulnerability Title
MIT krb5 信任管理问题漏洞
Vulnerability Description
MIT krb5（又名MIT Kerberos 5）是美国麻省理工（Massachusetts Institute Of Technology）大学的一套网络认证协议，它采用客户端/服务器结构，并且客户端和服务器端均可对对方进行身份认证（即双重验证），可防止窃听、防止replay攻击等。 MIT krb5 1.16.1之前版本存在信任管理问题漏洞。远程攻击者利用该漏洞获取未授权的访问权限或绕过安全限制。
CVSS Information
N/A
Vulnerability Type
N/A