CVE-2020-25722

Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacker could use this flaw to cause total domain compromise.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*
cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:*

Configuration 4 (hide)

OR cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:20.04:*:*:*:lts:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:21.04:*:*:*:*:*:*:*
cpe:2.3:o:canonical:ubuntu_linux:21.10:*:*:*:*:*:*:*

History

21 Nov 2024, 05:18

Type Values Removed Values Added
References () https://bugzilla.redhat.com/show_bug.cgi?id=2019764 - Issue Tracking, Patch, Third Party Advisory () https://bugzilla.redhat.com/show_bug.cgi?id=2019764 - Issue Tracking, Patch, Third Party Advisory
References () https://security.gentoo.org/glsa/202309-06 - () https://security.gentoo.org/glsa/202309-06 -
References () https://www.samba.org/samba/security/CVE-2020-25722.html - Mitigation, Vendor Advisory () https://www.samba.org/samba/security/CVE-2020-25722.html - Mitigation, Vendor Advisory

17 Sep 2023, 09:15

Type Values Removed Values Added
References
  • (GENTOO) https://security.gentoo.org/glsa/202309-06 -

Information

Published : 2022-02-18 18:15

Updated : 2024-11-21 05:18


NVD link : CVE-2020-25722

Mitre link : CVE-2020-25722

CVE.ORG link : CVE-2020-25722


JSON object : View

Products Affected

debian

  • debian_linux

fedoraproject

  • fedora

canonical

  • ubuntu_linux

samba

  • samba
CWE
CWE-863

Incorrect Authorization