1. Home
  2. CVE Database
  3. CVE-2020-25717
HIGH · 8.1

CVE-2020-25717

A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cause possible privilege escalation.

Vulnerability Description

A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cause possible privilege escalation.

CVSS Score

8.1

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
SambaSamba>= 3.0.0, < 4.13.14
DebianDebian Linux9.0
FedoraprojectFedora33
RedhatCodeready Linux Builder-
RedhatGluster Storage3.0
RedhatOpenstack13
RedhatVirtualization4.0
RedhatVirtualization Host4.0
RedhatEnterprise Linux7.0
RedhatEnterprise Linux Desktop7.0
RedhatEnterprise Linux Eus8.2
RedhatEnterprise Linux For Ibm Z Systems7.0
RedhatEnterprise Linux For Ibm Z Systems Eus8.2
RedhatEnterprise Linux For Power Big Endian7.0
RedhatEnterprise Linux For Power Little Endian7.0
RedhatEnterprise Linux For Power Little Endian Eus8.2
RedhatEnterprise Linux For Scientific Computing7.0
RedhatEnterprise Linux Resilient Storage7.0
RedhatEnterprise Linux Server7.0
RedhatEnterprise Linux Server Aus8.2

Related Weaknesses (CWE)

CWE-20

References

FAQ

What is CVE-2020-25717?

CVE-2020-25717 is a vulnerability with a CVSS score of 8.1 (HIGH). A flaw was found in the way Samba maps domain users to local users. An authenticated attacker could use this flaw to cause possible privilege escalation.

How severe is CVE-2020-25717?

CVE-2020-25717 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-25717?

Check the references section above for vendor advisories and patch information. Affected products include: Samba Samba, Debian Debian Linux, Fedoraproject Fedora, Redhat Codeready Linux Builder, Redhat Gluster Storage.