Description (CNA)
A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong namespace in containerized environments. This issue may lead to disclosing sensitive data from the host's Kerberos credentials cache.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| cifs-utils / cifs-utils | affected 0 before 7.2 |
CWE
CWE-488
References
- https://git.samba.org/?p=cifs-utils.git;a=commit;h=89b679228cc1be9739d54203d28289b03352c174
- https://web.git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/fs/smb?id=db363b0a1d9e6b9dc556296f1b1007aeb496a8cf
ADP enrichment
No English description supplied.
No references supplied.