CVE-2026-71199

{}

{}

{}

{"bugzilla": {"description": "krb5: Alteration of authentication indicators in CAMMAC container", "id": "2563453", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2563453"}, "csaw": false, "cvss3": {"cvss3_base_score": "8.1", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "status": "draft"}, "cwe": "CWE-354", "details": ["In MIT krb5 release 1.14 and later (since authentication indicator support was added), an authenticated attacker can bypass authentication indicator requirements using an unkeyed checksum in the CAMMAC authdata container."], "mitigation": {"lang": "en:us", "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}, "name": "CVE-2026-71199", "package_state": [{"cpe": "cpe:/a:redhat:enterprise_linux:10", "fix_state": "Affected", "package_name": "krb5", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:rhel_els:6", "fix_state": "Out of support scope", "package_name": "krb5", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:rhel_els:7", "fix_state": "Affected", "package_name": "krb5", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/a:redhat:enterprise_linux:8", "fix_state": "Affected", "package_name": "krb5", "product_name": "Red Hat Enterprise Linux 8"}, {"cpe": "cpe:/a:redhat:enterprise_linux:9", "fix_state": "Affected", "package_name": "krb5", "product_name": "Red Hat Enterprise Linux 9"}, {"cpe": "cpe:/a:redhat:hummingbird:1", "fix_state": "Affected", "package_name": "krb5", "product_name": "Red Hat Hardened Images"}], "public_date": "2026-11-09T15:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-71199\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-71199"], "statement": "Red Hat Product Security rates this vulnerability as Important because an authenticated user within a Kerberos realm can circumvent access control policies that enforce specific authentication indicators, such as multi-factor authentication requirements. Although exploitation relies on valid realm credentials, successful manipulation undermines trust boundaries across indicator-protected services without administrative privileges. Deployments that do not enforce authentication indicators on service principals are not exposed to this security policy bypass.", "threat_severity": "Important"}

{"created": "2026-11-12T04:00:08.143018+00:00", "updated": "2026-11-12T20:45:05.755085+00:00", "vendors": []}