vulnerability
Samba CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:L/Au:S/C:P/I:N/A:N) | Aug 16, 2018 | Aug 16, 2018 | Nov 27, 2024 |
Severity
4
CVSS
(AV:N/AC:L/Au:S/C:P/I:N/A:N)
Published
Aug 16, 2018
Added
Aug 16, 2018
Modified
Nov 27, 2024
Description
The Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because of missing access control checks. An authenticated attacker could use this flaw to extract confidential attribute values using LDAP search expressions. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable.
Solution(s)
samba-upgrade-4_6_16samba-upgrade-4_7_9samba-upgrade-4_8_4
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.