Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Advisory: Samba — FEDORA-2023-1c172e3264 Clear all filters
TI-2023-00873 CVE-2023-0922 · GHSA-v9cf-pxq6-w297

Cleartext transmission of sensitive information in Samba

Priority LOW 27

The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection.

CVSS 3.1MEDIUM 5.9 Network No auth User interaction EPSS 0.00484 Published 2023-04-03 No fix listed CWE-319
TI-2023-00581 CVE-2023-0614 · GHSA-8pwj-3gh6-824j

Information disclosure in Samba

Priority LOW 34

The fix in 4.6.16, 4.7.9, 4.8.4 and 4.9.7 for CVE-2018-10919 Confidential attribute disclosure vi LDAP filters was insufficient and an attacker may be able to obtain confidential BitLocker recovery keys from a Samba AD D…

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00571 Published 2023-04-03 No fix listed CWE-200