CVE-2023-34968

Katalog CVE

CVSS 5.3 · Medium EPSS 1,3%

Kerentanan Insertion of Sensitive Information Into Sent Data pada samba, fedoraproject fedora +3 lainnya. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of shares, files, and directories in the results for search queries. This flaw allows a malicious client or an attacker with a targeted RPC request to view the information that is part of the disclosed path.

Rincian

Terbit di NVD

20 Juli 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-201: Insertion of Sensitive Information Into Sent Data

EPSS (30 hari)

1,3% peluang dieksploitasi; lebih tinggi dari 70,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.samba.org/samba/security/CVE-2023-34968.html advisory vendor
• https://access.redhat.com/errata/RHSA-2023:6667 advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2023:7139 advisory pihak ketiga
• https://access.redhat.com/security/cve/CVE-2023-34968 advisory pihak ketiga
• https://bugzilla.redhat.com/show_bug.cgi?id=2222795 issue tracking · advisory pihak ketiga
• https://access.redhat.com/errata/RHSA-2024:0423
• https://access.redhat.com/errata/RHSA-2024:0580
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BPCSGND7LO467AJ...
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OT74M42E6C36W7P...
• https://security.netapp.com/advisory/ntap-20230731-0010/
• https://www.debian.org/security/2023/dsa-5477