CVE Catalog
CVE-2017-6594
HighSummary
The transit path validation code in Heimdal before 7.3 might allow attackers to bypass the capath policy protection mechanism by leveraging failure to add the previous hop realm to the transit path of issued tickets.
Risk Assessment
Organizations may be exposed to attacks that allow unauthorized access to resources, potentially leading to serious security breaches.
Recommendation
It is recommended to upgrade to Heimdal version 7.3 or later to mitigate this vulnerability.
Other vulnerabilities in Heimdal
Original NVD description (English source)
The transit path validation code in Heimdal before 7.3 might allow attackers to bypass the capath policy protection mechanism by leveraging failure to add the previous hop realm to the transit path of issued tickets.