CVE-2022-3592

2023-01-1200:00:00

CWE-61

redhat

www.cve.org

samba

symlink vulnerability

remote access

AI Score

6.8

Confidence

High

EPSS

0.003

Percentile

66.1%

JSON

A symlink following vulnerability was found in Samba, where a user can create a symbolic link that will make ‘smbd’ escape the configured share path. This flaw allows a remote user with access to the exported part of the file system under a share via SMB1 unix extensions or NFS to create symlinks to files outside the ‘smbd’ configured share path and gain access to another restricted server’s filesystem.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "samba",
    "versions": [
      {
        "version": "Affects samba since 4.17.0, Fixed samba 4.17.2.",
        "status": "affected"
      }
    ]
  }
]