Privilege Escalation

samba is vulnerable to Privilege Escalation. A design flaw in the Samba DirSync control implementation that exposes passwords and secrets in Active Directory to privileged users and Read-Only Domain Controllers (RODCs) allows RODCs and users possessing the GET_CHANGES right to access all attributes, including sensitive secrets and passwords.