CVE-2026-57915:详情

CVE-2026-57915

2026-06-26
12h09 +00:00
A07-Identif. and Authent. Fail
2026-08-03
12h05 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

Apache Kerby: Kerberos Pre-Authentication Bypass

It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending a PA-DATA with an unrecognized or unsupported type. Users are recommended to upgrade to version 2.1.2, which fixes this issue.

CVE 信息

相关弱点

CWE-ID 弱点名称 来源
CWE-304 Missing Critical Step in Authentication
The product implements an authentication technique, but it skips a step that weakens the technique.

参考资料