A local user can bypass the OpenAFS PAG (Process Authentication Group) throttling mechanism in Unix clients, allowing the user to create a PAG using an existing id number, effectively joining the PAG and letting the user steal the credentials in that PAG.
Weakness
The authentication algorithm is sound, but the implemented mechanism can be bypassed as the result of a separate weakness that is primary to the authentication error.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Openafs | Openafs | 1.0 (including) | 1.6.25 (excluding) |
| Openafs | Openafs | 1.8.0 (including) | 1.8.13 (excluding) |
| Openafs | Openafs | 1.9.0 (including) | 1.9.0 (including) |
| Openafs | Ubuntu | focal | * |
| Openafs | Ubuntu | oracular | * |
| Openafs | Ubuntu | upstream | * |