| Package | Affected versions | Patched versions |
|---|---|---|
| openafs | = 1.9.0≥ 1.0, < 1.6.25≥ 1.8.0, < 1.8.13 | 1.6.251.8.13 |
A local user can bypass the OpenAFS PAG (Process Authentication Group) throttling mechanism in Unix clients, allowing the user to create a PAG using an existing id number, effectively joining the PAG and letting the user steal the credentials in that PAG.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free