2 lines
2.3 KiB
JSON
2 lines
2.3 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"cifs-utils","vendor":"cifs-utils","versions":[{"lessThan":"7.2","status":"affected","version":"0","versionType":"semver"}]}],"source":"74b3a70d-cca6-4d34-9789-e83b222ae3be"}],"cveTags":[],"descriptions":[{"lang":"en","value":"A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong namespace in containerized environments. This issue may lead to disclosing sensitive data from the host's Kerberos credentials cache."},{"lang":"es","value":"Se detectó una falla en cifs-utils. Al intentar obtener credenciales Kerberos, el programa cifs.upcall del paquete cifs-utils realiza una llamada ascendente al espacio de nombres incorrecto en entornos contenedorizados. Este problema puede provocar la divulgación de datos confidenciales de la caché de credenciales Kerberos del host."}],"id":"CVE-2025-2312","lastModified":"2026-06-17T09:06:44.313","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"NONE","baseScore":5.9,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"NONE","privilegesRequired":"NONE","scope":"CHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N","version":"3.1"},"exploitabilityScore":1.4,"impactScore":4.0,"source":"74b3a70d-cca6-4d34-9789-e83b222ae3be","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2025-2312","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","timestamp":"2025-03-25T18:22:51.623724Z","version":"2.0.3"}}]},"published":"2025-03-25T18:15:34.987","references":[{"source":"74b3a70d-cca6-4d34-9789-e83b222ae3be","url":"https://git.samba.org/?p=cifs-utils.git;a=commit;h=89b679228cc1be9739d54203d28289b03352c174"},{"source":"74b3a70d-cca6-4d34-9789-e83b222ae3be","url":"https://web.git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/fs/smb?id=db363b0a1d9e6b9dc556296f1b1007aeb496a8cf"}],"sourceIdentifier":"74b3a70d-cca6-4d34-9789-e83b222ae3be","vulnStatus":"Deferred","weaknesses":[{"description":[{"lang":"en","value":"CWE-488"}],"source":"74b3a70d-cca6-4d34-9789-e83b222ae3be","type":"Secondary"}]}
|