description: A flaw was found in Samba. The KDC accepts kpasswd requests encrypted with any key known to it. By encrypting forged kpasswd requests with its own key, a user can change other users' passwords, enabling full domain takeover.
problem types: CWE-290
affected:
{
vendor: n/a
product: samba
versions:
version: Versions prior to samba 4.16.4, samba 4.15.9, samba 4.14.14, status: affected
}