CVE-2019-14902

—

CVSS 3.1

5.4 medium

EPSS

2%p73

Published

Jan 21, 2020 (Jan 21, 2020)

Modified

Jun 17, 2026

Description

There is an issue in all samba 4.11.x versions before 4.11.5, all samba 4.10.x versions before 4.10.12 and all samba 4.9.x versions before 4.9.18, where the removal of the right to create or modify a subtree would not automatically be taken away on all domain controllers.

Vendors: samba canonical opensuse debian
Products: samba, ubuntu linux, leap, debian linux
Weakness: CWE-284
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.