Apache Kerby: org.apache.kerby/kerb-server: Apache Kerby: Kerberos pre-authentication bypass via unrecognized PA-DATA

A flaw was found in Apache Kerby. An attacker can bypass the Kerberos pre-authentication check by sending a Pre-Authentication Data PA-DATA packet with an unrecognized or unsupported type. This vulnerability allows an attacker to circumvent the initial authentication step, potentially leading to...

Security Bulletin: IBM InfoSphere Information Server is affected by multiple vulnerabilities in Apache Kerby

Summary Multiple vulnerabilities in Apache Kerby that is used by InfoSphere Information Server were addressed. Vulnerability Details CVEID:CVE-2026-57915 DESCRIPTION: It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized or...