description: A flaw was found in cifs-utils in versions before 6.13. A user when mounting a krb5 CIFS file system from within a container can use Kerberos credentials of the host. The highest threat from this vulnerability is to data confidentiality and integrity.
problem types: CWE-266
affected:
{
product: cifs-utils
vendor: n/a
versions:
status: affected, version: cifs-utils 6.13
}