1 matches found
samba: pam_winbind fails open when non-existent group specified to require_membership_of
The winbindnamelisttosidstringlist function in nsswitch/pamwinbind.c in Samba through 4.1.2 handles invalid requiremembershipof group names by accepting authentication by any user, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by...
3.6CVSS7.2AI score0.0379EPSS
SaveExploits1References4
20