Symlink Following Vulnerability in Samba Affects Linux and UNIX Systems
CVE-2022-3592
6.5MEDIUM
Key Information:
What is CVE-2022-3592?
A symlink following vulnerability exists in Samba that permits a remote user to create symbolic links, enabling 'smbd' to bypass the configured share path. This flaw can be exploited when users have access to the exported portion of the filesystem via SMB1 Unix extensions or NFS, allowing them to create symlinks to files beyond the intended share, potentially exposing files on restricted server filesystems.
Affected Version(s)
samba Affects samba since 4.17.0, Fixed samba 4.17.2.