CVE-2021-20208CWE-266

CVE-2021-20208: vulnerability in cifs-utils

Published · Updated

Follow this CVE+ Monitor cifs-utils+ Monitor cifs-utils

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.7%
A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality and integrity.
Affected products
n/a · cifs-utils