CVEvulnerability
CVE-2018-14628
4.3 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2023-01-17
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
- Weaknesses
- CWE-862
Description
An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store.
Affected configurations
• samba samba (>= 4.0.0 < 4.18.9)
• samba samba (>= 4.19.0 < 4.19.3)
• fedoraproject fedora 37
Related
Weakness · CWE (1)
- CWE-862 Missing Authorization weakness
References
- http://www.openwall.com/lists/oss-security/2023/11/28/4 Mailing List
- https://bugzilla.redhat.com/show_bug.cgi?id=1625445 Exploit, Issue Tracking, Patch, Third Party Advisory
- https://bugzilla.samba.org/show_bug.cgi?id=13595 Exploit, Issue Tracking, Patch, Vendor Advisory
- https://lists.fedoraproject.org/archives/list/[email protected]/message/6DK57HQRTCDOZDIIICYWQ4Z5IQXTWVVW/ Patch, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/[email protected]/message/ACVMYEP5KJRL3FWSCZW2MQZ26IVPXY62/ Patch, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2023/11/28/4 Mailing List
- https://bugzilla.redhat.com/show_bug.cgi?id=1625445 Exploit, Issue Tracking, Patch, Third Party Advisory
- https://bugzilla.samba.org/show_bug.cgi?id=13595 Exploit, Issue Tracking, Patch, Vendor Advisory
- https://lists.fedoraproject.org/archives/list/[email protected]/message/6DK57HQRTCDOZDIIICYWQ4Z5IQXTWVVW/ Patch, Third Party Advisory
- https://lists.fedoraproject.org/archives/list/[email protected]/message/ACVMYEP5KJRL3FWSCZW2MQZ26IVPXY62/ Patch, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20230223-0008/ Third Party Advisory