CVE-2020-25718 Missing authorization in samba
An attacker with RODC access can print administrator tickets, leading to privilege escalation and data exposure in Samba Active Directory environments.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2020-25718?
CVE-2020-25718 is a high-severity missing authorization vulnerability in Fedoraproject Fedora, published on 18 Feb 2022. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A flaw was found in the way samba, as an Active Directory Domain Controller, is able to support an RODC (read-only domain controller). This would allow an RODC to print administrator tickets.
Weakness: CWE-862
Which versions are affected by CVE-2020-25718?
It affects 2 products.
Products include Fedoraproject Fedora, Samba Samba.
How do I fix CVE-2020-25718?
Apply the vendor's patch.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2020-25718 being exploited?
There is no known exploitation of CVE-2020-25718 in the wild and no public exploit code.
Other vulnerabilities in Fedoraproject Fedora
Sources
Also known as ALPINE-CVE-2020-25718, AZL-36994, AZL-8766, DEBIAN-CVE-2020-25718, ECHO-aa14-dbf1-eca8, GHSA-xrvp-6c6f-cv37 and 1 more.