Lucene search

K
osvGoogleOSV:CVE-2018-1139
HistoryAug 22, 2018 - 2:29 p.m.

CVE-2018-1139

2018-08-2214:29:00
Google
osv.dev
6

6.3 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

79.3%

A flaw was found in the way samba before 4.7.9 and 4.8.4 allowed the use of weak NTLMv1 authentication even when NTLMv1 was explicitly disabled. A man-in-the-middle attacker could use this flaw to read the credential and other details passed between the samba server and client.