The OpenAFS Foundation vulnerabilities
We track 1 vulnerability in The OpenAFS Foundation products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on November 14, 2024.
1vulnerabilities
0critical
1high
0exploited
7.8average CVSS score
Latest The OpenAFS Foundation vulnerabilities
- 7.8 High severity
OpenAFS: Authentication Bypass by Primary Weakness
A local user can bypass the OpenAFS PAG (Process Authentication Group) throttling mechanism in Unix clients, allowing the user to create a PAG using an existing id number, effectively joining the PAG and letting the user steal the credentials in that PAG.