CVE-2018-14628

MEDIUM

Samba - Info Disclosure

Title source: llm

Description

An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store.

References (6)

Scores

CVSS v3 4.3
EPSS 0.0050
EPSS Percentile 65.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Classification

CWE
CWE-862
Status published

Affected Products (2)

samba/samba < 4.18.9
fedoraproject/fedora

Timeline

Published Jan 17, 2023
Tracked Since Feb 18, 2026