Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2022-32744
HistoryAug 25, 2022 - 6:15 p.m.

CVE-2022-32744

2022-08-2518:15:00
Debian Security Bug Tracker
security-tracker.debian.org
45

0.001 Low

EPSS

Percentile

42.7%

A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users’ passwords, enabling full domain takeover.