CVE-2023-4154

Summary

CVE-2023-4154 is a design flaw in Samba's DirSync control implementation that poses a serious threat to password security in Active Directory. Privileged users and Read-Only Domain Controllers (RODCs) can access all attributes, including sensitive secrets and passwords, under normal circumstances. usual. In a default configuration, RODC DC accounts, which are restricted to replicating only certain passwords, can obtain access to all domain secrets, including the critical krbtgt, effectively obliterating the distinction between RODC and DC. The vulnerability also fails to address error conditions, such as out-of-memory situations, potentially allowing attackers to gain unauthorized access to secret attributes even under low-privilege conditions.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.