Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-14318

Опубликовано: 03 дек. 2020
Источник: nvd
CVSS3: 4.3
CVSS2: 4
EPSS Низкий

Описание

A flaw was found in the way samba handled file and directory permissions. An authenticated user could use this flaw to gain access to certain file and directory information which otherwise would be unavailable to the attacker.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*
Версия от 3.6.0 (включая) до 4.11.15 (исключая)
cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*
Версия от 4.12.0 (включая) до 4.12.9 (исключая)
cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*
Версия от 4.13.0 (включая) до 4.13.1 (исключая)
Конфигурация 2

Одно из

cpe:2.3:a:redhat:storage:3.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 35%
0.00145
Низкий

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-266
CWE-269

Связанные уязвимости

CVSS3: 4.3
ubuntu
около 5 лет назад

A flaw was found in the way samba handled file and directory permissions. An authenticated user could use this flaw to gain access to certain file and directory information which otherwise would be unavailable to the attacker.

CVSS3: 4.3
redhat
больше 5 лет назад

A flaw was found in the way samba handled file and directory permissions. An authenticated user could use this flaw to gain access to certain file and directory information which otherwise would be unavailable to the attacker.

CVSS3: 4.3
msrc
больше 1 года назад

Описание отсутствует

CVSS3: 4.3
debian
около 5 лет назад

A flaw was found in the way samba handled file and directory permissio ...

CVSS3: 4.3
github
больше 3 лет назад

A flaw was found in the way samba handled file and directory permissions. An authenticated user could use this flaw to gain access to certain file and directory information which otherwise would be unavailable to the attacker.

EPSS

Процентиль: 35%
0.00145
Низкий

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-266
CWE-269