CVE-2022-3592

A symlink following vulnerability was found in Samba, where a user can create a symbolic link that will make 'smbd' escape the configured share path. This flaw allows a remote user with access to the exported part of the file system under a share via SMB1 unix extensions or NFS to create symlinks to files outside the 'smbd' configured share path and gain access to another restricted server's filesystem.

CVSS v3.0 6.5 MEDIUM

6.5^/10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://access.redhat.com/security/cve/CVE-2022-3592	Third Party Advisory
https://www.samba.org/samba/security/CVE-2022-3592.html	Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2137776	Issue Tracking Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR	cpe:2.3:o:fedoraproject:fedora:36:::::::*
	cpe:2.3:o:fedoraproject:fedora:37:::::::*

Information

Published : 2023-01-12 07:15

Updated : 2023-01-19 23:59

NVD link : CVE-2022-3592

Mitre link : CVE-2022-3592

JSON object : View

CWE

CWE-61

UNIX Symbolic Link (Symlink) Following

Products Affected

fedoraproject

fedora

samba

samba

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://access.redhat.com/security/cve/CVE-2022-3592", "name": "https://access.redhat.com/security/cve/CVE-2022-3592", "tags": ["Third Party Advisory"], "refsource": "MISC"}, {"url": "https://www.samba.org/samba/security/CVE-2022-3592.html", "name": "https://www.samba.org/samba/security/CVE-2022-3592.html", "tags": ["Vendor Advisory"], "refsource": "MISC"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2137776", "name": "https://bugzilla.redhat.com/show_bug.cgi?id=2137776", "tags": ["Issue Tracking", "Third Party Advisory"], "refsource": "MISC"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "A symlink following vulnerability was found in Samba, where a user can create a symbolic link that will make 'smbd' escape the configured share path. This flaw allows a remote user with access to the exported part of the file system under a share via SMB1 unix extensions or NFS to create symlinks to files outside the 'smbd' configured share path and gain access to another restricted server's filesystem."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-61"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2022-3592", "ASSIGNER": "secalert@redhat.com"}}, "impact": {"baseMetricV3": {"cvssV3": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}}, "publishedDate": "2023-01-12T15:15Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndExcluding": "4.17.2", "versionStartIncluding": "4.17.0"}]}, {"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2023-01-20T07:59Z"}

6.5 /10