Skip to content
OpenAdvisories

Package · npm

node-krb5

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    CVE-2016-1000238

    Spoofing attack due to unvalidated KDC in node-krb5

    Affected versions of `node-krb5` do not validate the KDC prior to authenticating, which might allow an attacker with network access and enough time to spoof the KDC and impersonate a valid user without knowing their credentials. ## Recommendation It appears t…

    node-krb5 npm