ByteOS Network

NVD Vulnerability Details :

CVE-2020-25718

Modified

Source-secalert@redhat.com

Published At-18 Feb, 2022 | 18:15

Updated At-17 Sep, 2023 | 09:15

A flaw was found in the way samba, as an Active Directory Domain Controller, is able to support an RODC (read-only domain controller). This would allow an RODC to print administrator tickets.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	6.5	MEDIUM	AV:N/AC:L/Au:S/C:P/I:P/A:P

CPE Matches

Samba

>>samba>>Versions from 4.0.0(inclusive) to 4.13.14(exclusive)

cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*

Samba

>>samba>>Versions from 4.14.0(inclusive) to 4.14.10(exclusive)

cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*

Samba

>>samba>>Versions from 4.15.0(inclusive) to 4.15.2(exclusive)

cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*

Fedora Project

>>fedora>>35

cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-862	Primary	nvd@nist.gov
CWE-862	Secondary	secalert@redhat.com

References

Hyperlink	Source	Resource
https://bugzilla.redhat.com/show_bug.cgi?id=2019726	secalert@redhat.com	Issue Tracking Third Party Advisory
https://security.gentoo.org/glsa/202309-06	secalert@redhat.com	N/A
https://www.samba.org/samba/security/CVE-2020-25718.html	secalert@redhat.com	Vendor Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History