CVE-2026-57915 - CVSS, EPSS & CISA Kev 상세 정보 | CVE Find

CVE 설명

Apache Kerby: Kerberos Pre-Authentication Bypass

It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized or unsupported type. Users are recommended to upgrade to version 2.1.2, which fixes this issue.

CVE 정보

관련 약점

CWE-ID	약점 이름	출처
CWE-304	Missing Critical Step in Authentication The product implements an authentication technique, but it skips a step that weakens the technique.

참고 자료

https://lists.apache.org/thread/1y3glgh3kzwoxo5m2lq504cjlh1dsrfh
Tags : vendor-advisory