CVE-2018-10919CWE-203

The Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because of missing access control checks

Medium · published August 22, 2018

CVSS v3.0
4.3
EPSS
2%
Percentile
82.3
In the wild
Unconfirmed
What it is

The Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because of missing access control checks. An authenticated attacker could use this flaw to extract confidential attribute values using LDAP search expressions. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable.

The record
Technical detail
CVSS v3.0
4.3 · MEDIUM
Vector
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.02195 · 82.3th percentile
Weakness
CWE-203 · Observable Discrepancy
Published
2018-08-22T17:00Z
EPSS history
Timeline
  • 22 AUG 17:00Z
    The Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because of missing access control checks
    cvelistv5