CVE-2020-14318
MEDIUMSamba 3.6.0-4.11.14 - Authenticated Improper Privilege Management
Title source: llmDescription
A flaw was found in the way samba handled file and directory permissions. An authenticated user could use this flaw to gain access to certain file and directory information which otherwise would be unavailable to the attacker.
References (4)
Core 4
Core References
Third Party Advisory vendor-advisory
https://security.gentoo.org/glsa/202012-24
Mailing List mailing-list
https://lists.debian.org/debian-lts-announce/2024/04/msg00015.html
Issue Tracking, Patch, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1892631
Vendor Advisory
https://www.samba.org/samba/security/CVE-2020-14318.html
Scores
CVSS v3
4.3
EPSS
0.0016
EPSS Percentile
36.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-269
CWE-266
Status
published
Products (4)
redhat/enterprise_linux
7.0
redhat/enterprise_linux
8.0
redhat/storage
3.0
samba/samba
3.6.0 - 4.11.15
Published
Dec 03, 2020
Tracked Since
Feb 18, 2026