1. Home
  2. CVE Database
  3. CVE-2021-44141
MEDIUM · 4.3

CVE-2021-44141

All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file or directory exists in an area of the server file system not exported under the...

Vulnerability Description

All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file or directory exists in an area of the server file system not exported under the share definition. SMB1 with unix extensions has to be enabled in order for this attack to succeed.

CVSS Score

4.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
SambaSamba< 4.15.5
RedhatStorage3.0
FedoraprojectFedora34

Related Weaknesses (CWE)

CWE-59CWE-200

References

FAQ

What is CVE-2021-44141?

CVE-2021-44141 is a vulnerability with a CVSS score of 4.3 (MEDIUM). All versions of Samba prior to 4.15.5 are vulnerable to a malicious client using a server symlink to determine if a file or directory exists in an area of the server file system not exported under the...

How severe is CVE-2021-44141?

CVE-2021-44141 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-44141?

Check the references section above for vendor advisories and patch information. Affected products include: Samba Samba, Redhat Storage, Fedoraproject Fedora.