CVEvulnerability

CVE-2020-14318

4.3 MEDIUM Published 2020-12-03 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2020-12-03
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
Weaknesses
CWE-266, CWE-269

Description

A flaw was found in the way samba handled file and directory permissions. An authenticated user could use this flaw to gain access to certain file and directory information which otherwise would be unavailable to the attacker.

Affected configurations

• samba samba (>= 3.6.0 < 4.11.15) • samba samba (>= 4.12.0 < 4.12.9) • samba samba (>= 4.13.0 < 4.13.1) • redhat storage 3.0 • redhat enterprise linux 7.0 • redhat enterprise linux 8.0

Related

Weakness · CWE (2)

  • CWE-266 Incorrect Privilege Assignment weakness
  • CWE-269 Improper Privilege Management weakness

References