vulnwire
7.5high

CVE-2017-6594

The transit path validation code in Heimdal before 7.3 might allow attackers to bypass the capath policy protection mechanism by leveraging…

Published 9 y ago · modified 4 mo ago · JSON

CVSS
7.5
v3.1 · NVD
CISA KEV
No
not known exploited
EPSS
1.8%
percentile 78%
Public exploits
0
none known

The transit path validation code in Heimdal before 7.3 might allow attackers to bypass the capath policy protection mechanism by leveraging failure to add the previous hop realm to the transit path of issued tickets.

Exploit prediction (EPSS)

1.76% probability of exploitation in the next 30 days, higher than 78% of all scored CVEs.

CVSS scores

Assigned byVersionScoreVector
NVD3.17.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
NVD2.05.0AV:N/AC:L/Au:N/C:N/I:P/A:N

Classification

Weakness
  • CWE-295 Improper Certificate Validation

References

  • github.com /heimdal/heimdal/releases/tag/heimdal-7.3.0 · x_refsource_CONFIRM, x_transferred
  • lists.opensuse.org /opensuse-updates/2017-08/msg00062.html · vendor-advisory, x_refsource_SUSE, x_transferred
  • h5l.org /advisories.html?show=2017-04-13 · x_refsource_CONFIRM, x_transferred
  • github.com /heimdal/heimdal/commit/b1e699103f08d6a0ca46a122193c9da65f6cf837 · x_refsource_CONFIRM, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.