CVE-2018-10919: medium-severity vulnerability in The Samba Team samba
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
Samba's Active Directory LDAP server had a flaw that allowed authenticated attackers to access confidential information they shouldn't have access to, because certain security checks were missing. This could expose sensitive data stored in the directory.
An information disclosure vulnerability in Samba AD LDAP due to insufficient access control validation on attribute retrieval. An authenticated attacker can craft LDAP search queries to extract confidential attribute values that should be restricted, affecting versions prior to 4.6.16, 4.7.9, and 4.8.4.
In the same product, most dangerous first.