CVE-2018-14628

Katalog CVE

CVSS 4.3 · Medium EPSS 1,2%

Kerentanan Missing Authorization pada samba, fedoraproject fedora. Skor CVSS 3.1 4.3 (Medium) menurut NVD.

Deskripsi (NVD)

An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store.

Rincian

Terbit di NVD

17 Januari 2023

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

4.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-862: Missing Authorization

EPSS (30 hari)

1,2% peluang dieksploitasi; lebih tinggi dari 66,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://bugzilla.samba.org/show_bug.cgi?id=13595 exploit · issue tracking · patch · advisory vendor
• https://bugzilla.redhat.com/show_bug.cgi?id=1625445 exploit · issue tracking · patch · advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6DK57HQRTCDOZDI... patch · advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ACVMYEP5KJRL3FW... patch · advisory pihak ketiga
• https://security.netapp.com/advisory/ntap-20230223-0008/ advisory pihak ketiga
• http://www.openwall.com/lists/oss-security/2023/11/28/4 mailing list