dotnet / dotnet/Kerberos.NET

Missing PacType

Open
#319 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
C#
Stars
567
Forks
109
PR merge metrics
No merged PRs in 30d

Description

Some PAC types are missing (`Ticket checksum`, `PAC Attributes` and `PAC Requestor`), see https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-pac/3341cfa2-6ef5-42e0-b7bc-4544884bf399

Some of the PAC structures are important in terms of security. For example, the KDC can use the ticket checksum to verify if the ticket is modified (S4U2Self).

Relevent CVEs: CVE-2020-17049, CVE-2021-42287

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.