6 matches found
NT auth module vulnerability in OpenAM
The NT auth module in OpenAM before 14.6.6 allows a "replace Samba username attack."...
CVE-2022-34298
The NT auth module in OpenAM before 14.6.6 allows a "replace Samba username attack."...
Code injection
The NT auth module in OpenAM before 14.6.6 allows a "replace Samba username attack."...
CVE-2022-34298
The NT auth module in OpenAM before 14.6.6 allows a "replace Samba username attack."...
CVE-2022-34298
OpenAM before 14.6.6 is affected by a vulnerability in the NT auth module that enables a "replace Samba username attack." Multiple sources (Veracode and Red Hat) describe privilege escalation via the userPassword parameter in the process function, enabling an authenticated local attacker to manip...
