What is CVE-2017-7562?

CVE-2017-7562 is a medium-severity vulnerability in Mit Krb5, classified under Improper Certificate Validation. CVSS score: 6.5/10. Published 2018-07-26.

How severe is CVE-2017-7562?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Auth bypass in Mit Krb5

CVE-2017-7562

An authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1 handled the validation of client certificates. A remote attacker able to communicate with the KDC could potentially use this flaw to impersonate arb…

Vulnerability class: Improper Certificate Validation

EPSS: 0.005 (64.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N.

Affected products

Mit Krb5 — versions 1.16.1

Weakness classification (CWE)

References

github.com/krb5/krb5/pull/694/commits/50fe4074f188c2d4da0c421e96553acea8378db2 (x_refsource_CONFIRM)
100511 (vdb-entry, x_refsource_BID)
github.com/krb5/krb5/pull/694/commits/1de6ca2f2eb1fdbab51f1549a25a6903aefcc196 (x_refsource_CONFIRM)
github.com/krb5/krb5/pull/694 (x_refsource_CONFIRM)
RHSA-2018:0666 (x_refsource_REDHAT, vendor-advisory)
github.com/krb5/krb5/pull/694/commits/b7af544e50a4d8291524f590e20dd44430bf627d (x_refsource_CONFIRM)
bugzilla.redhat.com/show_bug.cgi (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2017-7562?: CVE-2017-7562 is a medium-severity vulnerability in Mit Krb5, classified under Improper Certificate Validation. CVSS score: 6.5/10. Published 2018-07-26.
How severe is CVE-2017-7562?: Medium severity. CVSS v3 base score is 6.5 out of 10.