CVE:CVE-2019-12098
CNNVD:CNNVD-201905-676
Heimdal是一款Kerberos 5（网络身份验证服务）的实现。
Heimdal 7.6.0之前版本中的lib/krb5/init_creds_pw.c文件的krb5_init_creds_step存在加密问题漏洞。该漏洞源于网络系统或产品未正确使用相关密码算法，导致内容未正确加密、弱加密、明文存储敏感信息等。
solution:Upgrade heimdal_project heimdal to a higher version than 7.6.0,and avoid the version (,7.6.0); Upgrade fedoraproject fedora to a higher version than 30,31,and avoid the version 30,31; Upgrade opensuse backports_sle to a higher version than 15.0,15.0:sp1,and avoid the version 15.0,15.0:sp1; Upgrade opensuse leap to a higher version than 15.0,15.1,42.3,and avoid the version 15.0,15.1,42.3; Upgrade debian debian_linux to a higher version than 9.0,and avoid the version 9.0