4 matches found
EUVD-2019-3750
Malware in sbrugna...
7.4CVSS7.3AI score0.01981EPSS
SaveExploits0References14
Design/Logic Flaw
In the client side of Heimdal before 7.6.0, failure to verify anonymous PKINIT PA-PKINIT-KX key exchange permits a man-in-the-middle attack. This issue is in krb5initcredsstep in lib/krb5/initcredspw.c...
5.8CVSS7AI score0.01981EPSS
SaveExploits0References11Affected Software5
CVE-2019-12098
In the client side of Heimdal before 7.6.0, failure to verify anonymous PKINIT PA-PKINIT-KX key exchange permits a man-in-the-middle attack. This issue is in krb5initcredsstep in lib/krb5/initcredspw.c...
7.4CVSS7.1AI score0.01981EPSS
SaveExploits0References11
CVE-2019-12098
In the client side of Heimdal before 7.6.0, failure to verify anonymous PKINIT PA-PKINIT-KX key exchange permits a man-in-the-middle attack. This issue is in krb5initcredsstep in lib/krb5/initcredspw.c...
7.4CVSS7.1AI score0.01981EPSS
SaveExploits0
20