CVE-2020-25720

NVD Published Date: November 17, 2024 at 11:15 AM
NVD Last Modified: November 18, 2024 at 05:11 PM
Download Patch
Vulnerability ID
CVE-2020-25720
Severity
HIGH
Severity Score
7.5
Summary
A vulnerability was found in Samba where a delegated administrator with permission to create objects in Active Directory can write to all attributes of the newly created object, including security-sensitive attributes, even after the object's creation. This issue occurs because the administrator owns the object due to the lack of an Access Control List (ACL) at the time of creation and later being recognized as the 'creator owner.' The retained significant rights of the delegated administrator may not be well understood, potentially leading to unintended privilege escalation or security risks.
Exploits
-
Metasploit Payload
-
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE ID
CWE-264

Recent Publish

KB5046697

KB5046705

CVE-2024-10592

CVE-2024-11094

KB5046855

KB5046856

See More ...

See SecOps Solution
in action

Schedule Demo