Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
apache/directory-kerby
trunk @ 036653f
5
Fixes
0
CVEs
CRITICAL
Peak severity
20.0%
Coverage
Highlights
Auth Bypass: 3 prior fixes. Scrutinize any change in this area.
kerb-server: most-fixed (2 issues). Treat as high-risk during review.
4 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Providing an empty or unknown pre-authentication entry could trick the server into satisfying the pre-authentication check without validating actual credentials, leading to a complete authentication bypass. This highlights a flaw in state tracking for verification results.
Auth Bypass: A signature verification bypass was possible if the JWT decoder did not strictly enforce compatibility between the token's declared cryptographic algorithm and the configured verification key's type, enabling potential token forgery.
Auth Bypass: The use of substring matching ('contains') instead of exact file name matching during verification key lookup allowed malicious issuers with crafted names to match against unintended key files.