{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "title": "current keys returned when randomizing the keys for a service principal",
    "tracking": {
      "current_release_date": "2026-07-24T00:07:22+00:00",
      "generator": {
        "date": "2026-07-24T00:07:22+00:00",
        "engine": {
          "name": "CSAF Generator",
          "version": "3.1.0"
        }
      },
      "id": "CVE-2014-5351",
      "initial_release_date": "2014-08-21T00:00:00+00:00",
      "revision_history": [
        {
          "date": "2026-07-24T00:07:22+00:00",
          "number": "1",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "category": "vendor",
        "name": "Red Hat",
        "branches": [
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 5.11",
            "product": {
              "name": "Red Hat Enterprise Linux 5.11",
              "product_id": "rhel-5.11.z.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:5"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 6-els",
            "product": {
              "name": "Red Hat Enterprise Linux 6-els",
              "product_id": "rhel-6-els.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:6"
              }
            }
          },
          {
            "category": "product_name",
            "name": "Red Hat Enterprise Linux 7-els",
            "product": {
              "name": "Red Hat Enterprise Linux 7-els",
              "product_id": "rhel-7-els.els",
              "product_identification_helper": {
                "cpe": "cpe:/o:redhat:rhel_els:7"
              }
            }
          },
          {
            "category": "product_version",
            "name": "krb5",
            "product": {
              "name": "krb5",
              "product_id": "krb5",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/krb5"
              }
            }
          },
          {
            "category": "product_version",
            "name": "krb5-debuginfo",
            "product": {
              "name": "krb5-debuginfo",
              "product_id": "krb5-debuginfo",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/krb5-debuginfo"
              }
            }
          },
          {
            "category": "product_version",
            "name": "krb5-devel",
            "product": {
              "name": "krb5-devel",
              "product_id": "krb5-devel",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/krb5-devel"
              }
            }
          },
          {
            "category": "product_version",
            "name": "krb5-libs",
            "product": {
              "name": "krb5-libs",
              "product_id": "krb5-libs",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/krb5-libs"
              }
            }
          },
          {
            "category": "product_version",
            "name": "krb5-pkinit",
            "product": {
              "name": "krb5-pkinit",
              "product_id": "krb5-pkinit",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/krb5-pkinit"
              }
            }
          },
          {
            "category": "product_version",
            "name": "krb5-pkinit-openssl",
            "product": {
              "name": "krb5-pkinit-openssl",
              "product_id": "krb5-pkinit-openssl",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/krb5-pkinit-openssl"
              }
            }
          },
          {
            "category": "product_version",
            "name": "krb5-server",
            "product": {
              "name": "krb5-server",
              "product_id": "krb5-server",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/krb5-server"
              }
            }
          },
          {
            "category": "product_version",
            "name": "krb5-server-ldap",
            "product": {
              "name": "krb5-server-ldap",
              "product_id": "krb5-server-ldap",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/krb5-server-ldap"
              }
            }
          },
          {
            "category": "product_version",
            "name": "krb5-workstation",
            "product": {
              "name": "krb5-workstation",
              "product_id": "krb5-workstation",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/krb5-workstation"
              }
            }
          },
          {
            "category": "product_version",
            "name": "krb5",
            "product": {
              "name": "krb5",
              "product_id": "krb5.src",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/krb5?arch=src"
              }
            }
          },
          {
            "category": "product_version",
            "name": "libkadm5",
            "product": {
              "name": "libkadm5",
              "product_id": "libkadm5",
              "product_identification_helper": {
                "purl": "pkg:rpm/redhat/libkadm5"
              }
            }
          }
        ]
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5 as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:krb5"
        },
        "product_reference": "krb5",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5 as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:krb5"
        },
        "product_reference": "krb5",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:krb5-debuginfo"
        },
        "product_reference": "krb5-debuginfo",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-debuginfo as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:krb5-debuginfo"
        },
        "product_reference": "krb5-debuginfo",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:krb5-devel"
        },
        "product_reference": "krb5-devel",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-devel as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:krb5-devel"
        },
        "product_reference": "krb5-devel",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:krb5-libs"
        },
        "product_reference": "krb5-libs",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-libs as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:krb5-libs"
        },
        "product_reference": "krb5-libs",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-pkinit as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:krb5-pkinit"
        },
        "product_reference": "krb5-pkinit",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-pkinit-openssl as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:krb5-pkinit-openssl"
        },
        "product_reference": "krb5-pkinit-openssl",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:krb5-server"
        },
        "product_reference": "krb5-server",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:krb5-server"
        },
        "product_reference": "krb5-server",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-ldap as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:krb5-server-ldap"
        },
        "product_reference": "krb5-server-ldap",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-server-ldap as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:krb5-server-ldap"
        },
        "product_reference": "krb5-server-ldap",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:krb5-workstation"
        },
        "product_reference": "krb5-workstation",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5-workstation as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:krb5-workstation"
        },
        "product_reference": "krb5-workstation",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5.src as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:krb5.src"
        },
        "product_reference": "krb5.src",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5.src as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:krb5.src"
        },
        "product_reference": "krb5.src",
        "relates_to_product_reference": "rhel-7-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "krb5.src as a component of Red Hat Enterprise Linux 5.11",
          "product_id": "rhel-5.11.z.els:krb5.src"
        },
        "product_reference": "krb5.src",
        "relates_to_product_reference": "rhel-5.11.z.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libkadm5 as a component of Red Hat Enterprise Linux 6-els",
          "product_id": "rhel-6-els.els:libkadm5"
        },
        "product_reference": "libkadm5",
        "relates_to_product_reference": "rhel-6-els.els"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libkadm5 as a component of Red Hat Enterprise Linux 7-els",
          "product_id": "rhel-7-els.els:libkadm5"
        },
        "product_reference": "libkadm5",
        "relates_to_product_reference": "rhel-7-els.els"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2014-5351",
      "cwe": {
        "id": "CWE-200",
        "name": "Exposure of Sensitive Information to an Unauthorized Actor"
      },
      "discovery_date": "2014-09-22T00:00:00+00:00",
      "flags": [
        {
          "label": "vulnerable_code_not_present",
          "product_ids": [
            "rhel-6-els.els:krb5-debuginfo",
            "rhel-6-els.els:krb5-devel",
            "rhel-7-els.els:krb5-debuginfo",
            "rhel-7-els.els:krb5-devel"
          ]
        }
      ],
      "notes": [
        {
          "category": "other",
          "text": "Red Hat Product Security has rated this issue as having Moderate security impact. This issue is not currently planned to be addressed in future updates. For additional information, refer to the Issue Severity Classification: https://access.redhat.com/security/updates/classification/.",
          "title": "Statement"
        },
        {
          "category": "description",
          "text": "The kadm5_randkey_principal_3 function in lib/kadm5/srv/svr_principal.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13 sends old keys in a response to a -randkey -keepold request, which allows remote authenticated users to forge tickets by leveraging administrative access.",
          "title": "Vulnerability description"
        }
      ],
      "product_status": {
        "known_affected": [
          "rhel-5.11.z.els:krb5.src",
          "rhel-6-els.els:krb5",
          "rhel-6-els.els:krb5-libs",
          "rhel-6-els.els:krb5-pkinit-openssl",
          "rhel-6-els.els:krb5-server",
          "rhel-6-els.els:krb5-server-ldap",
          "rhel-6-els.els:krb5-workstation",
          "rhel-6-els.els:krb5.src",
          "rhel-6-els.els:libkadm5",
          "rhel-7-els.els:krb5",
          "rhel-7-els.els:krb5-libs",
          "rhel-7-els.els:krb5-pkinit",
          "rhel-7-els.els:krb5-server",
          "rhel-7-els.els:krb5-server-ldap",
          "rhel-7-els.els:krb5-workstation",
          "rhel-7-els.els:krb5.src",
          "rhel-7-els.els:libkadm5"
        ],
        "known_not_affected": [
          "rhel-6-els.els:krb5-debuginfo",
          "rhel-6-els.els:krb5-devel",
          "rhel-7-els.els:krb5-debuginfo",
          "rhel-7-els.els:krb5-devel"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2014-5351"
        },
        {
          "category": "external",
          "summary": "nvd.nist.gov",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-5351"
        },
        {
          "category": "external",
          "summary": "www.cve.org",
          "url": "https://www.cve.org/CVERecord?id=CVE-2014-5351"
        }
      ],
      "remediations": [
        {
          "category": "no_fix_planned",
          "details": "Will not fix",
          "product_ids": [
            "rhel-5.11.z.els:krb5.src",
            "rhel-6-els.els:krb5",
            "rhel-6-els.els:krb5-libs",
            "rhel-6-els.els:krb5-pkinit-openssl",
            "rhel-6-els.els:krb5-server",
            "rhel-6-els.els:krb5-server-ldap",
            "rhel-6-els.els:krb5-workstation",
            "rhel-6-els.els:krb5.src",
            "rhel-6-els.els:libkadm5",
            "rhel-7-els.els:krb5",
            "rhel-7-els.els:krb5-libs",
            "rhel-7-els.els:krb5-pkinit",
            "rhel-7-els.els:krb5-server",
            "rhel-7-els.els:krb5-server-ldap",
            "rhel-7-els.els:krb5-workstation",
            "rhel-7-els.els:krb5.src",
            "rhel-7-els.els:libkadm5"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v2": {
            "version": "2.0",
            "vectorString": "AV:N/AC:H/Au:S/C:P/I:N/A:N",
            "baseScore": 2.1
          },
          "products": [
            "rhel-5.11.z.els:krb5.src",
            "rhel-6-els.els:krb5",
            "rhel-6-els.els:krb5-debuginfo",
            "rhel-6-els.els:krb5-devel",
            "rhel-6-els.els:krb5-libs",
            "rhel-6-els.els:krb5-pkinit-openssl",
            "rhel-6-els.els:krb5-server",
            "rhel-6-els.els:krb5-server-ldap",
            "rhel-6-els.els:krb5-workstation",
            "rhel-6-els.els:krb5.src",
            "rhel-6-els.els:libkadm5",
            "rhel-7-els.els:krb5",
            "rhel-7-els.els:krb5-debuginfo",
            "rhel-7-els.els:krb5-devel",
            "rhel-7-els.els:krb5-libs",
            "rhel-7-els.els:krb5-pkinit",
            "rhel-7-els.els:krb5-server",
            "rhel-7-els.els:krb5-server-ldap",
            "rhel-7-els.els:krb5-workstation",
            "rhel-7-els.els:krb5.src",
            "rhel-7-els.els:libkadm5"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate",
          "product_ids": [
            "rhel-5.11.z.els:krb5.src",
            "rhel-6-els.els:krb5",
            "rhel-6-els.els:krb5-debuginfo",
            "rhel-6-els.els:krb5-devel",
            "rhel-6-els.els:krb5-libs",
            "rhel-6-els.els:krb5-pkinit-openssl",
            "rhel-6-els.els:krb5-server",
            "rhel-6-els.els:krb5-server-ldap",
            "rhel-6-els.els:krb5-workstation",
            "rhel-6-els.els:krb5.src",
            "rhel-6-els.els:libkadm5",
            "rhel-7-els.els:krb5",
            "rhel-7-els.els:krb5-debuginfo",
            "rhel-7-els.els:krb5-devel",
            "rhel-7-els.els:krb5-libs",
            "rhel-7-els.els:krb5-pkinit",
            "rhel-7-els.els:krb5-server",
            "rhel-7-els.els:krb5-server-ldap",
            "rhel-7-els.els:krb5-workstation",
            "rhel-7-els.els:krb5.src",
            "rhel-7-els.els:libkadm5"
          ]
        }
      ],
      "title": "current keys returned when randomizing the keys for a service principal"
    }
  ]
}