CVE-2018-10919
At a glance Severity MEDIUM 4.3 EPSS EPSS 2.17 % · percentile 82 (2026-10-27) State PUBLISHED Published 2018-08-22 Updated 2024-08-05 Assigner redhat NVD status Modified Description The Samba Active Directory LDAP server was vulnerable to an information disclosure flaw because of missing access control checks. An authenticated attacker could use this flaw to extract confidential attribute values using LDAP search expressions. Samba versions before 4.6.16, 4.7.9 and 4.8.4 are vulnerable.
Scores Version Score Vector Scored by CVSS 3.0 MEDIUM 4.3 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N redhat CVSS 3.0 MEDIUM 4.3 CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N NVD · secalert@redhat.com (Secondary) CVSS 3.0 MEDIUM 6.5 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N NVD · nvd@nist.gov (Primary) CVSS 2.0 MEDIUM 4.0 AV:N/AC:L/Au:S/C:P/I:N/A:N NVD · nvd@nist.gov (Primary)
Weaknesses (CWE)
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:o:canonical:ubuntu_linux:14.04:*:*:*:lts:*:*:*cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:* ≥ 4.0.0 < 4.6.16cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:* ≥ 4.7.0 < 4.7.9cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:* ≥ 4.8.0 < 4.8.4Affected products
References
Sources
