CVE-2010-4021

The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 does not properly restrict the use of TGT credentials for armoring TGS requests, which might…

published December 2, 2010

CVSS
—
EPSS
2%
Percentile
81.5
In the wild
Unconfirmed
What it is

The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 does not properly restrict the use of TGT credentials for armoring TGS requests, which might allow remote authenticated users to impersonate a client by rewriting an inner request, aka a "KrbFastReq forgery issue."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02089 · 81.5th percentile
Published
2010-12-02T16:00Z
EPSS history
Timeline
  • 02 DEC 16:00Z
    The Key Distribution Center (KDC) in MIT Kerberos 5 (aka krb5) 1.7 does not properly restrict the use of TGT credentials for armoring TGS requests, which might…
    cvelistv5