CVE-2023-0225

medium

Description

A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory.

References

https://www.samba.org/samba/security/CVE-2023-0225.html

https://security.netapp.com/advisory/ntap-20230406-0007/

https://security.gentoo.org/glsa/202309-06

Details

Source: Mitre, NVD

Published: 2023-04-03

Updated: 2023-09-17

Risk Information

CVSS v2

Base Score: 4

Vector: CVSS2#AV:N/AC:L/Au:S/C:N/I:P/A:N

Severity: Medium

CVSS v3

Base Score: 4.3

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N