SMB1 Authentication Flaw in Samba Affects User Credentials
CVE-2016-2124
5.9MEDIUM
What is CVE-2016-2124?
A vulnerability exists in Samba's implementation of SMB1 authentication that could allow an attacker to intercept and retrieve plaintext passwords transmitted over the network, even when Kerberos authentication was enforced. This flaw poses significant security risks as it undermines the confidentiality of user credentials during SMB1 transactions, potentially exposing sensitive information to malicious actors.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
samba samba 4.15.2, samba 4.14.10, samba 4.13.14
References
CVSS V3.1
Score:
5.9
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved
