CVE-2017-6594

—

CVSS 3.1

7.5 high

EPSS

2%p77

Published

Aug 28, 2017 (Aug 28, 2017)

Modified

Jun 17, 2026

Description

The transit path validation code in Heimdal before 7.3 might allow attackers to bypass the capath policy protection mechanism by leveraging failure to add the previous hop realm to the transit path of issued tickets.

Vendors: heimdal project opensuse
Products: heimdal, leap
Weakness: CWE-295
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news0 stories

No ingested article mentions this CVE yet.