CVE-2016-2860

The newEntry function in ptserver/ptprocs.c in OpenAFS before 1.6.17 allows remote authenticated users from foreign Kerberos realms to bypass intended access…

published May 13, 2016

CVSS
—
EPSS
2%
Percentile
73.9
In the wild
Unconfirmed
What it is

The newEntry function in ptserver/ptprocs.c in OpenAFS before 1.6.17 allows remote authenticated users from foreign Kerberos realms to bypass intended access restrictions and create arbitrary groups as administrators by leveraging mishandling of the creator ID.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01501 · 73.9th percentile
Published
2016-05-13T16:00Z
EPSS history
Timeline
  • 13 MAY 16:00Z
    The newEntry function in ptserver/ptprocs.c in OpenAFS before 1.6.17 allows remote authenticated users from foreign Kerberos realms to bypass intended access…
    cvelistv5