Information Leak in Samba's LDAP Server Discovered by Vendor

CVE-2018-14628

What is CVE-2018-14628?

An information leak vulnerability exists in Samba's LDAP server due to inadequate access control checks. This allows an authenticated, but unprivileged attacker, to gain visibility into names and preserved attributes of objects that have been deleted from the LDAP store. The exposure of such sensitive information could potentially be exploited to understand the structure of the directory and the data lifecycle within the environment, leading to further security concerns.

References