Samba AD DC Administration Tool Remote LDAP Server Weakness

CVE-2023-0922

What is CVE-2023-0922?

The Samba AD DC administration tool has a fundamental weakness when connecting to a remote LDAP server. By default, this tool transmits new or reset passwords exclusively over a signed-only connection. This behavior may expose sensitive credentials during the transmission phase, especially in environments where secure communication is crucial. It is essential for administrators to review their configurations and reinforce security protocols to mitigate potential risks associated with this vulnerability.

References