A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of shares, files, and directories in the results for search queries. This flaw allows a malicious client or an attacker with a targeted RPC request to view the information that is part of the disclosed path.
2023-07-20T15:15:11.540
2024-12-06T11:15:05.270
Modified
CVSSv3.1: 5.3 (MEDIUM)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | samba | samba | < 4.16.11 | Yes |
| Application | samba | samba | < 4.17.10 | Yes |
| Application | samba | samba | < 4.18.5 | Yes |
| Operating System | fedoraproject | fedora | 37 | Yes |
| Operating System | fedoraproject | fedora | 38 | Yes |
| Application | redhat | storage | 3.0 | Yes |
| Operating System | redhat | enterprise_linux | 8.0 | Yes |
| Operating System | redhat | enterprise_linux | 9.0 | Yes |
| Operating System | debian | debian_linux | 11.0 | Yes |
| Operating System | debian | debian_linux | 12.0 | Yes |