Database/Control plane, storage & DevOps

Samba (AD DC): KDC and kpasswd share keys
CVE-2022-2031Control plane, storage & DevOpscurated
Impact
KDC and kpasswd share keys -> a user forced to change password can obtain tickets to other services
Who can reach it
Network (remote)
What to do
Control-plane: DC-only upgrade
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.