PT-2023-10677

CVE-2018-14628

·

Published

2018-08-31

·

Updated

2026-01-29

Description by

CVSS 3.1
4.3
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Samba (affected versions not specified)
Description An information leak issue was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Weakness enumeration
CWE-862: Missing Authorization
Related identifiers
CVE-2018-14628
BDU:2025-03903
ALT-PU-2023-7788
ALT-PU-2023-7794
ALT-PU-2024-12484
ALT-PU-2024-1311
AZL-13064
AZL-36987
ECHO-B63D-A3C9-BA66
OPENSUSE-SU-2024:13579-1
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com