Orta CVSS 5.3
CVE-2023-34968: Samba: güvenlik açığı
Açıklama (NVD)
A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of shares, files, and directories in the results for search queries. This flaw allows a malicious client or an attacker with a targeted RPC request to view the information that is part of the disclosed path.
Özet bilgiler
- Ürün
- Samba Samba
- CVSS v3.1
- 5.3
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - CWE
- CWE-201
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| samba-samba | — | — | 4.16.11 |
| samba-samba | 4.17.0 | — | 4.17.10 |
| samba-samba | 4.18.0 | — | 4.18.5 |
| fedoraproject-fedora | 37 | 37 | — |
| fedoraproject-fedora | 38 | 38 | — |
| redhat-storage | 3.0 | 3.0 | — |
| redhat-enterprise-linux | 8.0 | 8.0 | — |
| redhat-enterprise-linux | 9.0 | 9.0 | — |
| debian-debian-linux | 11.0 | 11.0 | — |
| debian-debian-linux | 12.0 | 12.0 | — |
Kaynaklar
- NVD kaydı
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- bugzilla.redhat.com
- www.samba.org
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- access.redhat.com
- bugzilla.redhat.com
- lists.fedoraproject.org
- lists.fedoraproject.org
- security.netapp.com
- www.debian.org
- www.samba.org
- CWE-201