Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-0620

Опубликовано: 06 июн. 2025
Источник: nvd
CVSS3: 6.6
CVSS3: 4.9
EPSS Низкий

Описание

A flaw was found in Samba. The smbd service daemon does not pick up group membership changes when re-authenticating an expired SMB session. This issue can expose file shares until clients disconnect and then connect again.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*
Версия от 4.21.0 (включая) до 4.21.6 (исключая)
cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*
Версия от 4.22.0 (включая) до 4.22.2 (исключая)

EPSS

Процентиль: 16%
0.00052
Низкий

6.6 Medium

CVSS3

4.9 Medium

CVSS3

Дефекты

CWE-552

Связанные уязвимости

CVSS3: 6.6
ubuntu
7 месяцев назад

A flaw was found in Samba. The smbd service daemon does not pick up group membership changes when re-authenticating an expired SMB session. This issue can expose file shares until clients disconnect and then connect again.

CVSS3: 6.6
redhat
больше 1 года назад

A flaw was found in Samba. The smbd service daemon does not pick up group membership changes when re-authenticating an expired SMB session. This issue can expose file shares until clients disconnect and then connect again.

CVSS3: 6.6
debian
7 месяцев назад

A flaw was found in Samba. The smbd service daemon does not pick up gr ...

suse-cvrf
6 месяцев назад

Security update for samba

CVSS3: 6.6
github
7 месяцев назад

A flaw was found in Samba. The smbd service daemon does not pick up group membership changes when re-authenticating an expired SMB session. This issue can expose file shares until clients disconnect and then connect again.

EPSS

Процентиль: 16%
0.00052
Низкий

6.6 Medium

CVSS3

4.9 Medium

CVSS3

Дефекты

CWE-552