Lucene search
+L

707 matches found

Kitploit
Kitploit
added 2022/04/15 12:30 p.m.25 views

modifyCertTemplate - ADCS Cert Template Modification And ACL Enumeration

This tool is designed to aid an operator in modifying ADCS certificate templates so that a created vulnerable state can be leveraged for privilege escalation and then reset the template to its previous state afterwards. This is specifically designed for a scenario where WriteProperty rights over ...

7.8AI score
SaveExploits0References4
Citrix
Citrix
added 2022/03/24 12:00 a.m.10 views

VDA not registered with the cloud connector Clock sync error

The VDA logon server reaching to different Geo Domain controller...

7.1AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2022/03/11 12:00 a.m.54 views

AlmaLinux 8 : idm:DL1 (ALSA-2021:5142)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2021:5142 advisory. samba: Samba AD DC did not always rely on the SID and PAC in Kerberos tickets CVE-2020-25719 Tenable has extracted the preceding description block directly from th...

9CVSS7AI score0.01687EPSS
SaveExploits0References2
Microsoft KB
Microsoft KB
added 2022/03/08 8:00 a.m.56 views

March 8, 2022—KB5011529 (Security-only update)

None None...

8.8CVSS6.8AI score0.56376EPSS
SaveExploits0
Microsoft KB
Microsoft KB
added 2022/03/08 8:00 a.m.160 views

March 8, 2022—KB5011560 (Security-only update)

None None...

9CVSS6.5AI score0.56376EPSS
SaveExploits0
OSV
OSV
added 2022/02/19 11:04 a.m.6 views

OESA-2022-1529 samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fixes: Checks in Samba AD DC to prevent alias SPNs may be bypassed, enabling users who can write to the account's servicePrincipalName attribute to impersonate the service.CVE-2022-0336...

8.8CVSS6.8AI score0.01634EPSS
SaveExploits0References2
OSV
OSV
added 2022/02/18 6:15 p.m.8 views

AZL-8651 CVE-2020-25722 affecting package samba 4.12.5-7

Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacker could use this flaw to cause total domain compromise...

8.8CVSS6.9AI score0.01606EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/18 6:15 p.m.2 views

DEBIAN-CVE-2020-25722

Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacker could use this flaw to cause total domain compromise...

8.8CVSS7.6AI score0.01606EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/18 6:15 p.m.25 views

CVE-2020-25718

A flaw was found in the way samba, as an Active Directory Domain Controller, is able to support an RODC read-only domain controller. This would allow an RODC to print administrator tickets...

8.8CVSS3.1AI score
SaveExploits0References3
OSV
OSV
added 2022/02/18 6:15 p.m.10 views

AZL-36994 CVE-2020-25718 affecting package samba for versions less than 4.18.3-1

A flaw was found in the way samba, as an Active Directory Domain Controller, is able to support an RODC read-only domain controller. This would allow an RODC to print administrator tickets...

8.8CVSS6.9AI score0.01595EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/18 6:15 p.m.5 views

ALPINE-CVE-2020-25718

A flaw was found in the way samba, as an Active Directory Domain Controller, is able to support an RODC read-only domain controller. This would allow an RODC to print administrator tickets...

8.8CVSS6.6AI score0.01595EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/18 6:15 p.m.41 views

CVE-2020-25719

A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerberos PAC and always use the SIDs found within. The result cou...

7.2CVSS2.5AI score
SaveExploits0References3
OSV
OSV
added 2022/02/18 6:15 p.m.13 views

AZL-36995 CVE-2020-25719 affecting package samba for versions less than 4.18.3-1

A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerberos PAC and always use the SIDs found within. The result cou...

7.2CVSS6.9AI score0.01687EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/18 6:15 p.m.3 views

DEBIAN-CVE-2020-25719

A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerberos PAC and always use the SIDs found within. The result cou...

7.2CVSS7.2AI score0.01687EPSS
SaveExploits0References1
OSV
OSV
added 2022/02/18 6:15 p.m.10 views

AZL-36996 CVE-2020-25722 affecting package samba for versions less than 4.18.3-1

Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacker could use this flaw to cause total domain compromise...

8.8CVSS6.9AI score0.01606EPSS
SaveExploits0References1
Prion
Prion
added 2022/02/18 6:15 p.m.24 views

Design/Logic Flaw

A flaw was found in the way samba, as an Active Directory Domain Controller, is able to support an RODC read-only domain controller. This would allow an RODC to print administrator tickets...

6.5CVSS8.3AI score0.01595EPSS
SaveExploits0References3Affected Software2
Prion
Prion
added 2022/02/18 6:15 p.m.33 views

Design/Logic Flaw

A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerberos PAC and always use the SIDs found within. The result cou...

9CVSS6.6AI score0.01687EPSS
SaveExploits0References3Affected Software17
CVE
CVE
added 2022/02/18 12:00 a.m.419 views

CVE-2020-25718

CVE-2020-25718 affects Samba when acting as an AD DC with an RODC, allowing an RODC to print administrator tickets. The vulnerability arises from how Samba handles RODC ticket printing, enabling elevated access. Impact is in the context of Active Directory domain control and ticket handling. Acco...

8.8CVSS8.3AI score0.01595EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
added 2022/02/18 12:00 a.m.30 views

CVE-2020-25718

A flaw was found in the way samba, as an Active Directory Domain Controller, is able to support an RODC read-only domain controller. This would allow an RODC to print administrator tickets...

8.8CVSS7.4AI score0.01595EPSS
SaveExploits0
AlpineLinux
AlpineLinux
added 2022/02/18 12:00 a.m.45 views

CVE-2020-25719

A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerberos PAC and always use the SIDs found within. The result cou...

9CVSS7.9AI score0.01687EPSS
SaveExploits0
Rows per page
Query Builder