CVE-2024-10394: Theft of credentials in Unix client PAGs
A local user can bypass the OpenAFS PAG (Process Authentication Group) throttling mechanism in Unix clients, allowing the user to create a PAG using an existing id number, effectively joining the PAG and letting the user steal the credentials in that PAG.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-10394?
The severity of CVE-2024-10394 is considered high due to its potential for local users to steal credentials through a PAG bypass.
How do I fix CVE-2024-10394?
To fix CVE-2024-10394, users should update to the latest version of OpenAFS that includes the necessary security patches.
Who is affected by CVE-2024-10394?
CVE-2024-10394 affects local users on Unix clients running vulnerable versions of OpenAFS.
What is the impact of CVE-2024-10394?
The impact of CVE-2024-10394 is that it allows attackers to create a PAG with an existing id number, potentially leading to credential theft.
Is there a workaround for CVE-2024-10394?
Currently, there are no documented workarounds for CVE-2024-10394; updating to a secure version is recommended.