Lucene search

K
cveMITRECVE-2023-34968
HistoryJul 20, 2023 - 2:58 p.m.

CVE-2023-34968

2023-07-2014:58:59
MITRE
web.nvd.nist.gov
103
samba
cve-2023-34968
path disclosure
spotlight protocol
security vulnerability

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.0%

A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of shares, files, and directories in the results for search queries. This flaw allows a malicious client or an attacker with a targeted RPC request to view the information that is part of the disclosed path.