CVE-2016-2125

—

CVSS 3.1

6.5 medium

EPSS

9%p95

Published

Oct 31, 2018 (Oct 31, 2018)

Modified

Jun 17, 2026

Description

It was found that Samba before versions 4.5.3, 4.4.8, 4.3.13 always requested forwardable tickets when using Kerberos authentication. A service to which Samba authenticated using Kerberos could subsequently use the ticket to impersonate Samba to other services or domain users.

Vendors: samba redhat
Products: samba, gluster storage, enterprise linux desktop, enterprise linux server, enterprise linux server aus, enterprise linux server eus, enterprise linux server tus, enterprise linux workstation
Weakness: CWE-287, CWE-20
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (9.2%)

In the news0 stories

No ingested article mentions this CVE yet.