CVE-2017-6594
First published: Mon Aug 28 2017(Updated: )
The transit path validation code in Heimdal before 7.3 might allow attackers to bypass the capath policy protection mechanism by leveraging failure to add the previous hop realm to the transit path of issued tickets.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Heimdal Project Heimdal | <=7.2.0 | |
| openSUSE Leap | =42.2 | |
| openSUSE Leap | =42.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/type
- vendor/heimdal project
- canonical/heimdal project heimdal
- version/heimdal project heimdal/7.2.0
- vendor/opensuse
- canonical/opensuse leap
- version/opensuse leap/42.2
- version/opensuse leap/42.3