← CVE Intelligence

CVE-2023-34968

Samba: spotlight server-side share path disclosure PUBLISHED

Description (CNA)

A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of shares, files, and directories in the results for search queries. This flaw allows a malicious client or an attacker with a targeted RPC request to view the information that is part of the disclosed path.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat Enterprise Linux 8unaffected 0:4.18.6-1.el8 before *
Red Hat / Red Hat Enterprise Linux 8unaffected 0:4.18.6-1.el8 before *
Red Hat / Red Hat Enterprise Linux 8.6 Extended Update Supportunaffected 0:4.15.5-15.el8_6 before *
Red Hat / Red Hat Enterprise Linux 8.8 Extended Update Supportunaffected 0:4.17.5-5.el8_8 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:4.18.6-100.el9 before *
Red Hat / Red Hat Enterprise Linux 9unaffected 0:4.18.6-100.el9 before *
Red Hat / Red Hat Virtualization 4 for Red Hat Enterprise Linux 8unaffected 0:4.15.5-15.el8_6 before *
Red Hat / Red Hat Enterprise Linux 6unknown
Red Hat / Red Hat Enterprise Linux 6unknown
Red Hat / Red Hat Enterprise Linux 7unknown
Red Hat / Red Hat Storage 3unknown

CWE

CWE-201

References

ADP enrichment

CVE

No English description supplied.