CVE-2017-6594

2017-08-2819:29:01

Google

osv.dev

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

53.2%

JSON

The transit path validation code in Heimdal before 7.3 might allow attackers to bypass the capath policy protection mechanism by leveraging failure to add the previous hop realm to the transit path of issued tickets.

CPENameOperatorVersion
heimdalequpstream-1.4.0+git20101228.dfsg.1
heimdaleqswitch-from-svn-to-git
heimdaleqheimdal-1.3.0pre4
heimdaleqheimdal-1.3.0pre1
heimdaleqheimdal-1.3.0rc1
heimdaleqheimdal-1.3.0pre7
heimdaleqheimdal-1.3.0pre8
heimdaleqheimdal-1.3.0pre10
heimdaleqheimdal-1.3.0pre5
heimdaleqheimdal-1.3.0pre9

Name	Operator	Version
heimdal	eq	upstream-1.4.0+git20101228.dfsg.1
heimdal	eq	switch-from-svn-to-git
heimdal	eq	heimdal-1.3.0pre4
heimdal	eq	heimdal-1.3.0pre1
heimdal	eq	heimdal-1.3.0rc1
heimdal	eq	heimdal-1.3.0pre7
heimdal	eq	heimdal-1.3.0pre8
heimdal	eq	heimdal-1.3.0pre10
heimdal	eq	heimdal-1.3.0pre5
heimdal	eq	heimdal-1.3.0pre9