1. Home
  2. CVE Database
  3. CVE-2020-25719
HIGH · 7.2

CVE-2020-25719

A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents i...

Vulnerability Description

A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents if it did not strictly require a Kerberos PAC and always use the SIDs found within. The result could include total domain compromise.

CVSS Score

7.2

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
SambaSamba>= 4.0.0, < 4.13.14
DebianDebian Linux9.0
FedoraprojectFedora33
CanonicalUbuntu Linux20.04
RedhatEnterprise Linux7.0
RedhatEnterprise Linux Desktop7.0
RedhatEnterprise Linux Eus8.2
RedhatEnterprise Linux For Ibm Z Systems7.0
RedhatEnterprise Linux For Ibm Z Systems Eus8.2
RedhatEnterprise Linux For Power Big Endian7.0
RedhatEnterprise Linux For Power Little Endian7.0
RedhatEnterprise Linux For Power Little Endian Eus8.2
RedhatEnterprise Linux For Scientific Computing7.0
RedhatEnterprise Linux Server Aus8.2
RedhatEnterprise Linux Server Tus8.2
RedhatEnterprise Linux Server Update Services For Sap Solutions8.2
RedhatEnterprise Linux Workstation7.0

Related Weaknesses (CWE)

CWE-287CWE-362

References

FAQ

What is CVE-2020-25719?

CVE-2020-25719 is a vulnerability with a CVSS score of 7.2 (HIGH). A flaw was found in the way Samba, as an Active Directory Domain Controller, implemented Kerberos name-based authentication. The Samba AD DC, could become confused about the user a ticket represents i...

How severe is CVE-2020-25719?

CVE-2020-25719 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-25719?

Check the references section above for vendor advisories and patch information. Affected products include: Samba Samba, Debian Debian Linux, Fedoraproject Fedora, Canonical Ubuntu Linux, Redhat Enterprise Linux.