CVE-2015-2694 Auth bypass in n/a
Remote attackers can bypass Kerberos preauthentication requirements by sending empty data or arbitrary realm names, potentially gaining unauthorized access.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2015-2694?
CVE-2015-2694 is a medium-severity authentication bypass vulnerability in Mit Kerberos 5, published on 25 May 2015. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The kdcpreauth modules in MIT Kerberos 5 (aka krb5) 1.12.x and 1.13.x before 1.13.2 do not properly track whether a client's request has been validated, which allows remote attackers to bypass an intended preauthentication requirement by providing (1) zero bytes of data or (2) an arbitrary realm name, related to plugins/preauth/otp/main.c and plugins/preauth/pkinit/pkinit_srv.c.
Weakness: CWE-264
Which versions are affected by CVE-2015-2694?
It affects 1 product.
Products include Mit Kerberos 5.
How do I fix CVE-2015-2694?
Upgrade to a fixed version.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2015-2694 being exploited?
There is no known exploitation of CVE-2015-2694 in the wild and no public exploit code.
Other vulnerabilities in Mit Kerberos 5
Sources
Also known as DEBIAN-CVE-2015-2694, GHSA-6h2g-5cjr-jj97, UBUNTU-CVE-2015-2694.