VULNERABILITY INTELLIGENCE

CVE-2018-10919

CVSS score4.3 MEDIUM
EPSS probability2.17%
CISA KEVNot currently listed
Published2018-08-22
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

The Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because of missing access control checks. An authenticated attacker could use this flaw to extract confidential attribute values using LDAP search expressions. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
  • CWE-203: Observable Discrepancy

Primary references