Debian-LAN vulnerability
Wolfgang Schweer discovered that Debian-LAN configured overly permissive ACLs for the Kerberos admin server. An authenticated user could possibly use this issue to change the credentials of other users, leading to privilege escalation.
Read at Ubuntu Security Notices
- Vendor
- Canonical, Microsoft
- Product
- Active Directory / Entra ID
- Exposure class
- Identity
Why it ranks 41 (Notable)
- Exposed product class: identity
- Widely deployed vendor product (Canonical)
- Vendor security advisory
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.
Links
- Ubuntu Security Notices (ubuntu.com)