CVE-2018-5730 log
| Source |
|
| Severity | Medium |
| Remote | Yes |
| Type | Insufficient validation |
| Description | A flaw was found in MIT krb5 1.6 or later, an authenticated kadmin user with permission to add principals to an LDAP Kerberos database can circumvent a DN containership check by supplying both a "linkdn" and "containerdn" database argument, or by supplying a DN string which is a left extension of a container DN string but is not hierarchically within the container DN. |
| Group | Package | Affected | Fixed | Severity | Status | Ticket |
|---|---|---|---|---|---|---|
| AVG-586 | krb5 | 1.16-1 | 1.16.1-1 | Medium | Fixed |
| Date | Advisory | Group | Package | Severity | Type |
|---|---|---|---|---|---|
| 05 Jun 2018 | ASA-201806-3 | AVG-586 | krb5 | Medium | insufficient validation |
| References |
|---|
https://github.com/krb5/krb5/commit/e1caf6fb74981da62039846931ebdffed71309d1 |
| Notes |
|---|
Fixed in 1.16.1 |