CVE-2018-1139mediumCWE-20

CVE-2018-1139: medium-severity vulnerability in The Samba Team samba

Published · Updated

Follow this CVE+ Monitor samba+ Monitor samba

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.4epss 3.1%
A flaw was found in the way samba before 4.7.9 and 4.8.4 allowed the use of weak NTLMv1 authentication even when NTLMv1 was explicitly disabled. A man-in-the-middle attacker could use this flaw to read the credential and other details passed between the samba server and client.
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Affected products
The Samba Team · samba
Related CVEs — The Samba Team samba

In the same product, most dangerous first.

CVE-2018-1140MEDIUMCVE-2018-1140EPSS 10.9%CVE-2018-10858MEDIUMCVE-2018-10858EPSS 4.3%CVE-2018-10918MEDIUMCVE-2018-10918EPSS 2.5%CVE-2018-10919MEDIUMCVE-2018-10919EPSS 2.2%