| Package | Affected versions | Patched versions |
|---|---|---|
| gluster storage | = 3.0 | |
| samba | ≥ 3.0.25, < 4.3.13≥ 4.4.0, < 4.4.8≥ 4.5.0, < 4.5.3 | 4.3.134.4.84.5.3 |
It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free