CVE-2023-0922
5.9MEDIUMThe Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection.
Published: 4/3/2023Updated: 2/13/2025
Description
The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection.
AI AnalysisPowered by AI
Affected Products
sambasamba
sambasamba
sambasamba
4.18.0
sambasamba
4.18.0
sambasamba
4.18.0
sambasamba
4.18.0
sambasamba
4.18.0
References
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YXBPYIA4VWNOD437NAHZ3NXKAETLFB5S/
- https://security.gentoo.org/glsa/202309-06
- https://security.netapp.com/advisory/ntap-20230406-0007/Third Party Advisory
- https://www.samba.org/samba/security/CVE-2023-0922.htmlMitigationVendor Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YXBPYIA4VWNOD437NAHZ3NXKAETLFB5S/
- https://security.gentoo.org/glsa/202309-06
- https://security.netapp.com/advisory/ntap-20230406-0007/Third Party Advisory
- https://www.samba.org/samba/security/CVE-2023-0922.htmlMitigationVendor Advisory