CVE-2019-14902
- State
- Published
- Severity
- 5.4 Medium
- Published
- Jan 21, 2020
- Updated
- Aug 5, 2024
- Reserved
- Aug 10, 2019
Description
There is an issue in all samba 4.11.x versions before 4.11.5, all samba 4.10.x versions before 4.10.12 and all samba 4.9.x versions before 4.9.18, where the removal of the right to create or modify a subtree would not automatically be taken away on all domain controllers.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.4 Medium | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N | redhat |
Weaknesses
Affected Products
| Product | Versions |
|---|---|
samba[UNKNOWN] |
|
References
- https://www.samba.org/samba/security/CVE-2019-14902.html
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14902
- https://security.netapp.com/advisory/ntap-20200122-0001/
- https://www.synology.com/security/advisory/Synology_SA_20_01
- USN-4244-1vendor-advisory
- openSUSE-SU-2020:0122vendor-advisory
- FEDORA-2020-6bd386c7ebvendor-advisory
- FEDORA-2020-f92cd0e72bvendor-advisory
- GLSA-202003-52vendor-advisory
- [debian-lts-announce] 20210529 [SECURITY] [DLA 2668-1] samba security updatemailing-list
- [debian-lts-announce] 20230914 [SECURITY] [DLA 3563-1] samba security updatemailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.