Privilege Escalation

🗓️ 19 Oct 2023 14:47:07Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 33 Views

Samba vulnerability in DirSync control allows privileged users access sensitive Active Directory dat

Reporter	Title	Published	Views	Family All 108
ATTACKERKB	CVE-2023-4154	7 Nov 202320:15	–	attackerkb
AlpineLinux	CVE-2023-4154	7 Nov 202319:14	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в samba	3 May 202623:59	–	astralinux
Cloud Foundry	USN-6425-1: Samba vulnerabilities \| Cloud Foundry	9 Nov 202300:00	–	cloudfoundry
Circl	CVE-2023-4154	21 Jan 202621:18	–	circl
CNNVD	Samba Security Vulnerabilities	13 Oct 202300:00	–	cnnvd
CVE	CVE-2023-4154	7 Nov 202319:14	–	cve
Cvelist	CVE-2023-4154 Samba: ad dc password exposure to privileged users and rodcs	7 Nov 202319:14	–	cvelist
Debian	[SECURITY] [DSA 5525-1] samba security update	11 Oct 202318:14	–	debian
Debian CVE	CVE-2023-4154	7 Nov 202319:14	–	debiancve

Vulners

Node

samba sambaMatch2:4.13.2+dfsg-3debian

AND

samba sambaMatch2:4.13.5+dfsg-2debian

AND

debian debian_linuxMatch999

OR

samba sambaMatch4.17.4-r1os

AND

samba sambaMatch4.15.5-r0os

AND

samba sambaMatch4.15.0-r0os

AND

samba sambaMatch4.14.6-r0os

AND

samba sambaMatch4.13.5-r0os

AND

samba sambaMatch4.15.3-r1os

AND

samba sambaMatch4.18.2-r0os

AND

samba sambaMatch4.18.7-r0os

AND

samba sambaMatch4.15.9-r0os

AND

samba sambaMatch4.15.3-r0os

AND

samba sambaMatch4.16.7-r1os

AND

samba sambaMatch4.14.4-r0os

AND

samba sambaMatch4.18.3-r0os

AND

samba sambaMatch4.11.6-r0os

AND

samba sambaMatch4.13.3-r2os

AND

samba sambaMatch4.18.1-r0os

AND

samba sambaMatch4.18.4-r0os

AND

samba sambaMatch4.14.5-r0os

AND

samba sambaMatch4.18.0-r0os

AND

samba sambaMatch4.15.2-r0os

AND

samba sambaMatch4.16.8-r1os

AND

samba sambaMatch4.15.7-r0os

AND

samba sambaMatch4.15.1-r1os

AND

samba sambaMatch4.17.5-r1os

AND

samba sambaMatch4.18.5-r1os

AND

samba sambaMatch4.12.2-r1os

AND

samba sambaMatch4.12.2-r0os

AND

samba sambaMatch4.18.6-r0os

AND

samba sambaMatch4.14.2-r1os

AND

samba sambaMatch4.12.0-r0os

AND

samba sambaMatch4.15.5-r1os

AND

samba sambaMatch4.12.1-r0os

AND

samba sambaMatch4.18.1-r1os

AND

samba sambaMatch4.17.5-r0os

AND

samba sambaMatch4.16.4-r0os

AND

samba sambaMatch4.15.7-r1os

AND

samba sambaMatch4.16.7-r0os

AND

samba sambaMatch4.15.6-r0os

AND

samba sambaMatch4.13.3-r1os

AND

samba sambaMatch4.16.6-r0os

AND

samba sambaMatch4.14.6-r1os

AND

alpinelinux alpine_linuxMatchedge

OR

samba sambaMatch4.18.2-r0os

AND

samba sambaMatch4.18.3-r0os

AND

samba sambaMatch4.18.5-r0os

AND

samba sambaMatch4.18.4-r0os

AND

alpinelinux alpine_linuxMatch3.18

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2023-4154
access	www.access.redhat.com/security/cve/CVE-2023-4154
bugzilla	www.bugzilla.samba.org/show_bug.cgi
security	www.security.netapp.com/advisory/ntap-20231124-0002/
samba	www.samba.org/samba/security/CVE-2023-4154.html
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

29 Dec 2023 07:04Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.16.5 - 7.5

EPSS0.00397

samba vulnerability dirsync control privileged users active directory sensitive data