Security Advisory
CVE-2021-20208
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality and integrity.