CVE-2020-25722 — Incorrect Authorization in Samba
Severity
8.8HIGHNVD
EPSS
0.4%
top 38.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedFeb 18
Latest updateFeb 19
Description
Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacker could use this flaw to cause total domain compromise.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9
Affected Packages3 packages
Also affects: Debian Linux 10.0, 9.0, Fedora 33, 34, 35, Ubuntu Linux 18.04, 20.04, 21.04, 21.10
Patches
🔴Vulnerability Details
4GHSA▶
GHSA-5hcc-fcfj-mj9h: Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data↗2022-02-19
OSV▶
CVE-2020-25722: Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data↗2022-02-18
CVEList▶
CVE-2020-25722: Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data↗2022-02-18
📋Vendor Advisories
5Microsoft▶
Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacker could use this flaw to cause total domain compromise.↗2022-02-08
Red Hat
▶
Debian▶
CVE-2020-25722: samba - Multiple flaws were found in the way samba AD DC implemented access and conforma...↗2020