vulnerability
Samba CVE-2018-10919: Confidential attribute disclosure from the AD LDAP server
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:L/Au:S/C:P/I:N/A:N) | 2018-08-16 | 2018-08-16 | 2024-11-27 |
Severity
4
CVSS
(AV:N/AC:L/Au:S/C:P/I:N/A:N)
Published
2018-08-16
Added
2018-08-16
Modified
2024-11-27
Description
The Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because of missing access control checks. An authenticated attacker could use this flaw to extract confidential attribute values using LDAP search expressions. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable.
Solution(s)
samba-upgrade-4_6_16samba-upgrade-4_7_9samba-upgrade-4_8_4
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.