Missing Authorization

🗓️ 30 Nov 2023 11:52:41Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 20 Views

Samba LDAP Missing Authorization Vulnerability

Reporter	Title	Published	Views	Family All 73
Tenable Nessus	Amazon Linux 2023 : libnetapi, libnetapi-devel, libsmbclient (ALAS2023-2023-190)	8 Jun 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : libnetapi, libnetapi-devel, libsmbclient (ALAS2023-2023-206)	8 Jun 202300:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : samba (EulerOS-SA-2024-1496)	8 Apr 202400:00	–	nessus
Tenable Nessus	EulerOS 2.0 SP9 : samba (EulerOS-SA-2024-1517)	8 Apr 202400:00	–	nessus
Tenable Nessus	Fedora 39 : samba (2023-4e69bf4c59)	1 Dec 202300:00	–	nessus
Tenable Nessus	Fedora 38 : samba (2023-9adeb354af)	3 Dec 202300:00	–	nessus
Tenable Nessus	GLSA-202402-28 : Samba: Multiple Vulnerabilities	20 Feb 202400:00	–	nessus
Tenable Nessus	NewStart CGSL MAIN 7.02 : samba Multiple Vulnerabilities (NS-SA-2025-0133)	25 Jul 202500:00	–	nessus
Tenable Nessus	Photon OS 4.0: Samba PHSA-2025-4.0-0805	22 May 202500:00	–	nessus
Tenable Nessus	Photon OS 5.0: Samba PHSA-2025-5.0-0506	23 Apr 202500:00	–	nessus

Vulners

Node

samba sambaMatch2:4.13.5+dfsg-2debian

AND

samba sambaMatch2:4.13.2+dfsg-3debian

AND

debian debian_linuxMatch999

OR

samba sambaMatch4.18.1-r1os

AND

samba sambaMatch4.15.2-r0os

AND

samba sambaMatch4.15.3-r1os

AND

samba sambaMatch4.18.1-r0os

AND

samba sambaMatch4.12.1-r0os

AND

samba sambaMatch4.16.7-r1os

AND

samba sambaMatch4.14.2-r1os

AND

samba sambaMatch4.18.4-r0os

AND

samba sambaMatch4.18.5-r1os

AND

samba sambaMatch4.18.7-r0os

AND

samba sambaMatch4.15.1-r1os

AND

samba sambaMatch4.17.5-r1os

AND

samba sambaMatch4.15.5-r1os

AND

samba sambaMatch4.14.5-r0os

AND

samba sambaMatch4.15.6-r0os

AND

samba sambaMatch4.18.6-r0os

AND

samba sambaMatch4.13.3-r1os

AND

samba sambaMatch4.15.0-r0os

AND

samba sambaMatch4.14.6-r0os

AND

samba sambaMatch4.12.2-r1os

AND

samba sambaMatch4.16.8-r1os

AND

samba sambaMatch4.18.0-r0os

AND

samba sambaMatch4.18.2-r0os

AND

samba sambaMatch4.15.7-r0os

AND

samba sambaMatch4.14.6-r1os

AND

samba sambaMatch4.18.3-r0os

AND

samba sambaMatch4.15.9-r0os

AND

samba sambaMatch4.13.5-r0os

AND

samba sambaMatch4.11.6-r0os

AND

samba sambaMatch4.15.3-r0os

AND

samba sambaMatch4.17.5-r0os

AND

samba sambaMatch4.12.2-r0os

AND

samba sambaMatch4.13.3-r2os

AND

samba sambaMatch4.16.6-r0os

AND

samba sambaMatch4.16.7-r0os

AND

samba sambaMatch4.14.4-r0os

AND

samba sambaMatch4.18.8-r0os

AND

samba sambaMatch4.15.7-r1os

AND

samba sambaMatch4.12.0-r0os

AND

samba sambaMatch4.16.4-r0os

AND

samba sambaMatch4.15.5-r0os

AND

samba sambaMatch4.17.4-r1os

AND

alpinelinux alpine_linuxMatchedge

OR

samba sambaMatch4.18.8-r0os

AND

alpinelinux alpine_linuxMatch3.19

OR

samba sambaMatch4.18.8-r0os

AND

samba sambaMatch4.18.3-r0os

AND

samba sambaMatch4.18.2-r0os

AND

samba sambaMatch4.18.5-r0os

AND

samba sambaMatch4.18.4-r0os

AND

alpinelinux alpine_linuxMatch3.18

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2018-14628
bugzilla	www.bugzilla.redhat.com/show_bug.cgi
bugzilla	www.bugzilla.samba.org/show_bug.cgi
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/6DK57HQRTCDOZDIIICYWQ4Z5IQXTWVVW/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/ACVMYEP5KJRL3FWSCZW2MQZ26IVPXY62/
security	www.security.netapp.com/advisory/ntap-20230223-0008/
openwall	www.openwall.com/lists/oss-security/2023/11/28/4

22 Jan 2025 17:20Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.14.3

EPSS0.00535

samba ldap authorization vulnerability access control unprivileged users deleted objects security