VULNERABILITY INTELLIGENCE
CVE-2017-6594
CVSS score7.5 HIGH
EPSS probability1.76%
CISA KEVNot currently listed
Published2017-08-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Description
The transit path validation code in Heimdal before 7.3 might allow attackers to bypass the capath policy protection mechanism by leveraging failure to add the previous hop realm to the transit path of issued tickets.
Weakness classification
- CWE-295: Improper Certificate Validation
Primary references
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Vendor Advisory
- cve@mitre.org — Issue Tracking, Patch, Third Party Advisory
- cve@mitre.org — Issue Tracking, Patch, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Patch, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Patch, Third Party Advisory