MIT krb5 Security Bypass Vulnerability

MIT krb5 also known as MIT Kerberos 5 is the United States Massachusetts Institute of Technology MIT developed a set of network authentication protocols, which uses a client/server structure, and the client and server side can be authenticated to each other i.e., double authentication to prevent...

CVE-2018-5730

MIT krb5 1.6 or later allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check by supplying both a "linkdn" and "containerdn" database argument, or by supplying a DN string which is a left extension of a container DN stri...

PT-2018-17115 · Mit +4 · Mit-Krb5 +4

Name of the Vulnerable Software and Affected Versions: MIT krb5 versions 1.6 or later Description: The issue allows an authenticated kadmin with permission to add principals to an LDAP Kerberos database to circumvent a DN containership check. This can be done by supplying both a linkdn and...