User Password Manipulation Vulnerability in Samba

CVE-2022-32744

What is CVE-2022-32744?

A security issue has been identified in Samba, where the Key Distribution Center (KDC) is capable of accepting kpasswd requests that are encrypted with any known key. This vulnerability allows malicious actors to craft forged kpasswd requests using their own keys. Consequently, they could manipulate and alter passwords of other users, leading to the risk of a complete takeover of the domain. This issue poses a significant threat to the integrity and security of user accounts and overall network safety.

References