Lucene search

K
cvelistDebianCVELIST:CVE-2019-3467
HistoryDec 23, 2019 - 6:04 p.m.

CVE-2019-3467

2019-12-2318:04:11
debian
www.cve.org

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.8%

Debian-edu-config all versions < 2.11.10, a set of configuration files used for Debian Edu, and debian-lan-config < 0.26, configured too permissive ACLs for the Kerberos admin server, which allowed password changes for other Kerberos user principals.

CNA Affected

[
  {
    "product": "Debian Edu",
    "vendor": "Debian",
    "versions": [
      {
        "status": "affected",
        "version": "all versions < 2.11.10"
      }
    ]
  }
]

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.8%