CVE-2022-32744CWE-290

A flaw was found in Samba

published August 25, 2022

CVSS
—
EPSS
1%
Percentile
67.8
In the wild
Unconfirmed
What it is

A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users' passwords, enabling full domain takeover.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01192 · 67.8th percentile
Weakness
CWE-290 · Authentication Bypass by Spoofing
Published
2022-08-25T00:00Z
EPSS history
Timeline
  • 25 AUG 00:00Z
    A flaw was found in Samba
    cvelistv5