VULNERABILITY INTELLIGENCE
CVE-2013-4134
CVSS score4.3 MEDIUM
EPSS probability0.76%
CISA KEVNot currently listed
Published2013-11-05
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:P/I:N/A:N
Description
OpenAFS before 1.4.15, 1.6.x before 1.6.5, and 1.7.x before 1.7.26 uses weak encryption (DES) for Kerberos keys, which makes it easier for remote attackers to obtain the service key.
Primary references
- secalert@redhat.com — Third Party Advisory
- secalert@redhat.com — Broken Link
- secalert@redhat.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory