vulnerability
Oracle Solaris 11: CVE-2020-25721 (11.4 SRU 42.113.1)
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:L/Au:S/C:P/I:P/A:P) | Feb 17, 2022 | Feb 17, 2022 | Mar 24, 2022 |
Severity
7
CVSS
(AV:N/AC:L/Au:S/C:P/I:P/A:P)
Published
Feb 17, 2022
Added
Feb 17, 2022
Modified
Mar 24, 2022
Description
Kerberos acceptors need easy access to stable AD identifiers (eg objectSid). Samba as an AD DC now provides a way for Linux applications to obtain a reliable SID (and samAccountName) in issued tickets.
Solutions
oracle-solaris-11-4-upgrade-library-samba-libsmbclient-4-13-8-11-4-42-0-1-113-0oracle-solaris-11-4-upgrade-service-network-samba-4-13-14-11-4-42-0-1-113-0
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.