Explore

is there any workaround for fixing this issue or any alternative for the kerberos library present ? The python-kerberos checkPassword() method is badly insecure. It does a kinit (AS-REQ) to ask a KDC for a TGT for the given user principal, and interprets the success or failure of that as indicating whether the password is correct. issue Link to CVE entry about this security...