4.3

CVE-2018-14628: fedoraproject fedora Missing Authorization

CVSS: 4.3v3.1MediumAnalyzed
AliasesALPINE-CVE-2018-14628UBUNTU-CVE-2018-14628DEBIAN-CVE-2018-14628
Published 17-01-2023Last modified 13-02-2025
Open JSON

Vulnerability summary

CVE-2018-14628 is a medium (CVSS 4.3) Missing Authorization vulnerability in fedoraproject fedora. EPSS estimates a 1.17% chance of exploitation in the next 30 days, higher than 66.8% of scored vulnerabilities. 2 public exploits are recorded.

Overall risk
27/100
0100
Medium · default modelHow is this calculated?
CVSS score
4.3/10
010
Medium · v3.1 (NVD)
EPSS score
1.17%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits2reference

Advisory lineage

Upstream 0 · Downstream 1 · Related 1
MGASA-2026-0142CGA-7Q9F-VG2Q-C5Q6

Timeline

  1. 17-01-2023
    PublishedVulnerability first disclosed.
  2. 13-02-2025
    Last modifiedVulnerability information updated.

Description

An information leak vulnerability was discovered in Samba's LDAP server. Due to missing access control checks, an authenticated but unprivileged attacker could discover the names and preserved attributes of deleted objects in the LDAP store.

CVSS metrics

6 scores · 6 sources · 1 version

EPSS trend

Probability

1.17%

Chance of exploitation in the next 30 days

Percentile

67%

Versus all other CVEs

30-day change

0.00 pp

From 1.17% on 19-09-2026

19-09-202619-10-2026
EPSS score
1.17%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found
  • referenceUnverified

    Exploit Reference (bugzilla.samba.org)

    Maturity: unknown

  • referenceUnverified

    Exploit Reference (bugzilla.redhat.com)

    Maturity: unknown

Weaknesses

CWE · root cause

Affected systems

Alpine1 product
  • samba≥ 4.0.0, < 4.18.9-r0
Chainguard1 product
  • libauth-samba< 4.23.2-r0
Debian1 product
  • samba< 2:4.17.12+dfsg-0+deb12u3 | < 2:4.19.3+dfsg-1
Fedoraproject1 product
Opensuse1 product
  • samba&distro=openSUSE Tumbleweed< 4.19.4+git.339.acf1ccaa020-1.1
Samba1 product
  • samba≥ 4.0.0, < 4.18.9 | ≥ 4.19.0, < 4.19.3
Ubuntu1 product
  • sambaAll versions (No fix recorded) | < 2:4.19.4+dfsg-3ubuntu1
Wolfi1 product
  • libauth-samba< 4.23.2-r0

8 vendors · 8 products

References

14 links
Show all 14 references