Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2019-14902

There is an issue in all samba 4.11.x versions before 4.11.5, all samba 4.10.x versions before 4.10.12 and all samba 4.9.x versions before 4.9.18, where the removal of the right to create or modify a subtree would not automatically be taken away on all domain controllers.

  • Published: Jan 21, 2020
  • Updated: Apr 13, 2023
  • CVE: CVE-2019-14902
  • Severity: Medium
  • Exploit:

CVSS v3:

  • Severity: Medium
  • Score: 5.4
  • AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

CVSS v2:

  • Severity: Medium
  • Score: 5.5
  • AV:N/AC:L/Au:S/C:P/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
samba / samba 4.10.0 4.10.12
samba / samba 4.11.0 4.11.5
samba / samba 4.0.0 4.9.18
canonical / ubuntu_linux 16.04 16.04.x
canonical / ubuntu_linux 18.04 18.04.x
canonical / ubuntu_linux 19.04 19.04.x
opensuse / leap 15.1 15.1.x
canonical / ubuntu_linux 19.10 19.10.x
debian / debian_linux 9.0 9.0.x