openssh: authentication bypass
| Package(s): | openssh | CVE #(s): | CVE-2014-9278 | ||||||||||||
| Created: | March 6, 2015 | Updated: | March 11, 2015 | ||||||||||||
| Description: | From the Red Hat advisory: It was found that when OpenSSH was used in a Kerberos environment, remote authenticated users were allowed to log in as a different user if they were listed in the ~/.k5users file of that user, potentially bypassing intended authentication restrictions. | ||||||||||||||
| Alerts: |
| ||||||||||||||