https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 15:07:42 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-00114 bdu:2025-00114 https://cve.radiocsirt.org/vuln/bdu:2025-00114 https://cve.radiocsirt.org/vuln/euvd-2026-293224 EUVD-2026-293224 https://cve.radiocsirt.org/vuln/euvd-2026-293224 https://cve.radiocsirt.org/vuln/fkie_cve-2020-25720 <p>A vulnerability was found in Samba where a delegated administrator with permission to create objects in Active Directory can write to all attributes of the newly created object, including security-sensitive attributes, even after the object&#39;s creation. This issue occurs because the administrator owns the object due to the lack of an Access Control List (ACL) at the time of creation and later being recognized as the &#39;creator owner.&#39; The retained significant rights of the delegated administrator may not be well understood, potentially leading to unintended privilege escalation or security risks.</p> <p>A vulnerability was found in Samba where a delegated administrator with permission to create objects in Active Directory can write to all attributes of the newly created object, including security-sensitive attributes, even after the object&#39;s creation. This issue occurs because the administrator owns the object due to the lack of an Access Control List (ACL) at the time of creation and later being recognized as the &#39;creator owner.&#39; The retained significant rights of the delegated administrator may not be well understood, potentially leading to unintended privilege escalation or security risks.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-25720 https://cve.radiocsirt.org/vuln/ghsa-r7p2-7qw3-phxg <p>A vulnerability was found in Samba where a delegated administrator with permission to create objects in Active Directory can write to all attributes of the newly created object, including security-sensitive attributes, even after the object&#39;s creation. This issue occurs because the administrator owns the object due to the lack of an Access Control List (ACL) at the time of creation and later being recognized as the &#39;creator owner.&#39; The retained significant rights of the delegated administrator may not be well understood, potentially leading to unintended privilege escalation or security risks.</p> <p>A vulnerability was found in Samba where a delegated administrator with permission to create objects in Active Directory can write to all attributes of the newly created object, including security-sensitive attributes, even after the object&#39;s creation. This issue occurs because the administrator owns the object due to the lack of an Access Control List (ACL) at the time of creation and later being recognized as the &#39;creator owner.&#39; The retained significant rights of the delegated administrator may not be well understood, potentially leading to unintended privilege escalation or security risks.</p> https://cve.radiocsirt.org/vuln/ghsa-r7p2-7qw3-phxg https://cve.radiocsirt.org/vuln/gsd-2020-25720 gsd-2020-25720 https://cve.radiocsirt.org/vuln/gsd-2020-25720 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-25720 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: samba, Ubuntu:Pro:16.04:LTS: samba, Ubuntu:Pro:18.04:LTS: samba, Ubuntu:Pro:20.04:LTS: samba, Ubuntu:22.04:LTS: samba</p> <p>A vulnerability was found in Samba where a delegated administrator with permission to create objects in Active Directory can write to all attributes of the newly created object, including security-sensitive attributes, even after the object&#39;s creation. This issue occurs because the administrator owns the object due to the lack of an Access Control List (ACL) at the time of creation and later being recognized as the &#39;creator owner.&#39; The retained significant rights of the delegated administrator may not be well understood, potentially leading to unintended privilege escalation or security risks.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: samba, Ubuntu:Pro:16.04:LTS: samba, Ubuntu:Pro:18.04:LTS: samba, Ubuntu:Pro:20.04:LTS: samba, Ubuntu:22.04:LTS: samba</p> <p>A vulnerability was found in Samba where a delegated administrator with permission to create objects in Active Directory can write to all attributes of the newly created object, including security-sensitive attributes, even after the object&#39;s creation. This issue occurs because the administrator owns the object due to the lack of an Access Control List (ACL) at the time of creation and later being recognized as the &#39;creator owner.&#39; The retained significant rights of the delegated administrator may not be well understood, potentially leading to unintended privilege escalation or security risks.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-25720