Name: CVE-2017-7562: Improper Certificate Validation
Creator: Rapid7
Published: 2018-07-26T00:00:00.000Z
License: https://www.rapid7.com/legal/website-terms-of-use/
Keywords: CVE, CVE-2017-7562, CWE-287, CWE-295, CVSS 6.5, EPSS 0.00767

An authentication bypass flaw was found in the way krb5's certauth interface before 1.16.1 handled the validation of client certificates. A remote attacker able to communicate with the KDC could potentially use this flaw to impersonate arbitrary principals under rare and erroneous circumstances.

CVSS Details

CVSS 3.1 Base Score: 6.5
CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)
CVSS 3.0 Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N)

Covered by Rapid7

Product	Vendor Advisory	Solution File	Added	Published
Amazon Linux Ami 2	—	Upgrade krb5-pkinitUpgrade krb5-workstationUpgrade krb5-debuginfoUpgrade krb5-server-ldapUpgrade krb5-libsUpgrade krb5-develUpgrade krb5-serverUpgrade libkadm5	Apr 27, 2020	Jul 26, 2018
Amazon_linux	—	Upgrade krb5	Sep 7, 2018	Apr 10, 2018
Centos_linux	—	Upgrade libkadm5Upgrade krb5-libsUpgrade krb5-debuginfoUpgrade krb5-server-ldapUpgrade krb5-develUpgrade krb5-workstationUpgrade krb5-serverUpgrade krb5-pkinit	Aug 28, 2019	Jul 26, 2018
Huawei Euleros 2_0_sp2	—	Upgrade krb5-libsUpgrade krb5-develUpgrade krb5-pkinitUpgrade libkadm5Upgrade krb5-workstationUpgrade krb5-server-ldapUpgrade krb5-server	Nov 6, 2018	Jul 26, 2018
Huawei Euleros 2_0_sp3	—	Upgrade krb5-workstationUpgrade krb5-server-ldapUpgrade krb5-serverUpgrade krb5-develUpgrade krb5-pkinitUpgrade libkadm5Upgrade krb5-libs	Nov 8, 2018	Jul 26, 2018
Oracle_linux	—	Upgrade krb5-libsUpgrade krb5-server-ldapUpgrade krb5-develUpgrade krb5-workstationUpgrade libkadm5Upgrade krb5-serverUpgrade krb5-pkinit	Apr 19, 2018	Aug 25, 2017
Redhat_linux	—	Upgrade libkadm5Upgrade krb5-serverUpgrade krb5-libsUpgrade krb5-pkinitUpgrade krb5-develUpgrade krb5-server-ldapUpgrade krb5-workstationUpgrade krb5-debuginfo	Apr 11, 2018	Apr 10, 2018
Suse	—	Upgrade krb5-plugin-kdb-ldapUpgrade krb5-32bitUpgrade krb5-docUpgrade krb5Upgrade krb5-plugin-preauth-otpUpgrade krb5-serverUpgrade krb5-clientUpgrade krb5-plugin-preauth-pkinit	May 26, 2018	Apr 10, 2018

Prioritize with Active Threat Intelligence

With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.

Explore Intelligence Hub

MDR Buyer's Guide

Global Threat Landscape Report

Grow your business

CVSS Details

Covered by Rapid7

Prioritize with Active Threat Intelligence