CVE-2020-25719

2022-02-1800:00:00

CWE-287

redhat

www.cve.org

samba

active directory

kerberos

authentication

domain compromise

AI Score

7.7

Confidence

High

EPSS

0.001

Percentile

47.0%

JSON

A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerberos PAC and always use the SIDs found within. The result could include total domain compromise.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "samba",
    "versions": [
      {
        "version": "samba 4.15.2, samba 4.14.10, samba 4.13.14",
        "status": "affected"
      }
    ]
  }
]