Описание
The http_negotiate_create_context function in protocol/http/http_negotiate.c in ELinks 0.12 before 0.12pre6, when using HTTP Negotiate or GSS-Negotiate authentication, delegates user credentials through GSSAPI, which allows remote servers to authenticate as the client via the delegated credentials.
Релиз | Статус | Примечание |
---|---|---|
devel | not-affected | 0.12~pre5-9ubuntu1 |
esm-apps/xenial | not-affected | 0.12~pre5-9ubuntu1 |
esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was not-affected [0.12~pre5-9ubuntu1]] |
hardy | ignored | end of life |
lucid | ignored | end of life |
oneiric | ignored | end of life |
precise | ignored | end of life |
precise/esm | DNE | precise was needed |
quantal | ignored | end of life |
raring | not-affected | 0.12~pre5-9ubuntu1 |
Показывать по
EPSS
5.1 Medium
CVSS2
Связанные уязвимости
The http_negotiate_create_context function in protocol/http/http_negotiate.c in ELinks 0.12 before 0.12pre6, when using HTTP Negotiate or GSS-Negotiate authentication, delegates user credentials through GSSAPI, which allows remote servers to authenticate as the client via the delegated credentials.
The http_negotiate_create_context function in protocol/http/http_negotiate.c in ELinks 0.12 before 0.12pre6, when using HTTP Negotiate or GSS-Negotiate authentication, delegates user credentials through GSSAPI, which allows remote servers to authenticate as the client via the delegated credentials.
The http_negotiate_create_context function in protocol/http/http_negot ...
The http_negotiate_create_context function in protocol/http/http_negotiate.c in ELinks 0.12 before 0.12pre6, when using HTTP Negotiate or GSS-Negotiate authentication, delegates user credentials through GSSAPI, which allows remote servers to authenticate as the client via the delegated credentials.
EPSS
5.1 Medium
CVSS2