CVE-2020-25721

2022-03-1600:00:00

CWE-20

redhat

www.cve.org

cve-2020-25721

kerberos

stable ad identifiers

samba

linux applications

reliable sid

issued tickets

AI Score

8.4

Confidence

High

EPSS

0.005

Percentile

75.5%

JSON

Kerberos acceptors need easy access to stable AD identifiers (eg objectSid). Samba as an AD DC now provides a way for Linux applications to obtain a reliable SID (and samAccountName) in issued tickets.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "samba",
    "versions": [
      {
        "version": "Affected - All versions since Samba 4.0.0, Fixed-In - v4.15.2, v4.14.10 and v4.13.14",
        "status": "affected"
      }
    ]
  }
]