VULNERABILITY INTELLIGENCE

CVE-2018-14628

CVSS score4.3 MEDIUM
EPSS probability1.17%
CISA KEVNot currently listed
Published2023-01-17
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Description

An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store.

Weakness classification

  • CWE-862: Missing Authorization

Primary references