CVE-2023-0225

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

A flaw was found in Samba. An incomplete access check on dnsHostName allows authenticated but otherwise unprivileged users to delete this attribute from any object in the directory.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-732

Affected software

No affected versions have been published.

Timeline

Published
Apr 3, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-02276.5Insufficient Session Expiration in GitHub repository pyload/pyload prior to 0.5.0b3.dev36.CVE-2023-02288.8Improper Authentication vulnerability in ABB Symphony Plus S+ Operations.This issue affects Symphony Plus S+ Operations: from 2.X through 2.CVE-2023-02296.3A flaw was found in github.com/openshift/apiserver-library-go, used in OpenShift 4.12 and 4.11, that contains an issue that can allow low-prCVE-2023-02305.4The VK All in One Expansion Unit WordPress plugin before 9.86.0.0 does not validate and escape some of its block options before outputting tCVE-2023-02315.4The ShopLentor WordPress plugin before 2.5.4 does not validate and escape some of its block options before outputting them back in a page/poCVE-2023-02329.8The ShopLentor WordPress plugin before 2.5.4 unserializes user input from cookies in order to track viewed products and user data, which couCVE-2023-02335.4The ActiveCampaign WordPress plugin before 8.1.12 does not validate and escape some of its block options before outputting them back in a paCVE-2023-02348.8The SiteGround Security WordPress plugin before 1.3.1 does not properly sanitize user input before using it in an SQL query, leading to an aCVE-2023-02366.1The Tutor LMS WordPress plugin before 2.0.10 does not sanitise and escape the reset_key and user_id parameters before outputting then back iCVE-2023-02385.5Due to lack of a security policy, the WARP Mobile Client (<=6.29) for Android was susceptible to this vulnerability which allowed a maliciouCVE-2023-02407.8There is a logic error in io_uring's implementation which can be used to trigger a use-after-free vulnerability leading to privilege escalatCVE-2023-02416.5pgAdmin 4 versions prior to v6.19 contains a directory traversal vulnerability. A user of the product may change another user's settings or
CVE-2023-0225: Medium severity, CVSS 4.3 | Vulnix