Security Advisory

CVE-2019-3467

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-12-23 18:04:11
Last updated 2024-08-04 19:12:09
Assigner debian
State PUBLISHED

Description

Debian-edu-config all versions < 2.11.10, a set of configuration files used for Debian Edu, and debian-lan-config < 0.26, configured too permissive ACLs for the Kerberos admin server, which allowed password changes for other Kerberos user principals.