CVE-2018-14628
Public on 2023-01-17
Modified on 2024-01-30
Description
An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store.
Severity
Medium
CVSS v3 Base Score
See breakdown
Affected Packages
| Platform | Package | Release Date | Advisory | Status |
|---|---|---|---|---|
| HAQM Linux 1 | samba | Not Affected | ||
| HAQM Linux 2 - Core | samba | Not Affected | ||
| HAQM Linux 2023 | samba | 2023-05-25 | ALAS2023-2023-190 | Fixed |
| HAQM Linux 2023 | samba | 2023-06-05 | ALAS2023-2023-206 | Fixed |
CVSS Scores
| Score Type | Score | Vector | |
|---|---|---|---|
| HAQM Linux | CVSSv3 | 4.3 | CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |
| NVD | CVSSv3 | 4.3 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N |