Description (CNA)
A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users' passwords, enabling full domain takeover.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / samba | affected Versions prior to samba 4.16.4, samba 4.15.9, samba 4.14.14 |
CWE
CWE-290
References
ADP enrichment
No English description supplied.