CVE-2017-7562
An authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1 handled the validation of client certificates. A remote attacker able to communicate w…
Published: 2018-07-26 · CVSS: 6.5 · CVSS 3.0
An authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1 handled the validation of client certificates. A remote attacker able to communicate with the KDC could potentially use this flaw to impersonate arbitrary principals under rare and erroneous circumstances.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7