CVE-2026-3012— Samba 数据伪造问题漏洞
Possible ATT&CK Techniques 2AI
T1555 · Credentials from Password Stores T1557.002 · ARP Cache PoisoningAffected Version Matrix 17
新しい脆弱性情報の通知を購読するログインして購読
I. CVE-2026-3012の基本情報
脆弱性情報
脆弱性についてご質問がありますか？Shenlongの分析が参考になるかご確認ください！
Shenlongの10の質問を表示 ↗ 高度な大規模言語モデル技術を使用していますが、出力には不正確または古い情報が含まれる可能性があります。Shenlongはデータの正確性を確保するよう努めていますが、実際の状況に基づいて検証・判断してください。
脆弱性タイトル
Samba: group policy certificate enrollment uses http:// without validation
ソース: CVE Program / CVE List V5
脆弱性説明
A flaw was found in Samba’s certificate auto-enrollment Group Policy handling. When certificate auto-enrollment is enabled, Samba may retrieve a CA certificate over an unencrypted HTTP connection and install it into the local trust store without proper verification. An attacker with the ability to intercept or redirect network traffic could exploit this behavior to supply a malicious certificate authority certificate, potentially allowing interception or spoofing of trusted communications.
ソース: CVE Program / CVE List V5
CVSS情報
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N
ソース: CVE Program / CVE List V5
脆弱性タイプ
对数据真实性的验证不充分
ソース: CVE Program / CVE List V5
脆弱性タイトル
Samba 数据伪造问题漏洞
ソース: CNNVD (China National Vulnerability Database)
脆弱性説明
Samba是Samba开源的一个适用于 Linux 和 Unix 的标准 Windows 互操作性程序套件。 Samba存在数据伪造问题漏洞，该漏洞源于证书自动注册组策略处理中通过未加密HTTP连接检索CA证书且未进行适当验证，可能导致攻击者提供恶意CA证书。
ソース: CNNVD (China National Vulnerability Database)
CVSS情報
N/A
ソース: CNNVD (China National Vulnerability Database)
脆弱性タイプ
N/A
ソース: CNNVD (China National Vulnerability Database)
影響を受ける製品
| ベンダー | プロダクト | 影響を受けるバージョン | CPE | 購読 |
|---|---|---|---|---|
| Red Hat | Red Hat Enterprise Linux 10 | 0:4.23.5-109.el10_2 ~ * | cpe:/o:redhat:enterprise_linux:10.2 | |
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support | 0:4.21.3-114.el10_0.1 ~ * | cpe:/o:redhat:enterprise_linux_eus:10.0 | |
| Red Hat | Red Hat Enterprise Linux 8 | 0:4.19.4-16.el8_10 ~ * | cpe:/a:redhat:enterprise_linux:8::appstream | |
| Red Hat | Red Hat Enterprise Linux 8 | 0:4.19.4-16.el8_10 ~ * | cpe:/a:redhat:enterprise_linux:8::appstream | |
| Red Hat | Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | 0:4.15.5-16.el8_6.1 ~ * | cpe:/a:redhat:rhel_aus:8.6::appstream | |
| Red Hat | Red Hat Enterprise Linux 8.6 Extended Update Support Long-Life Add-On | 0:4.15.5-16.el8_6.1 ~ * | cpe:/a:redhat:rhel_aus:8.6::appstream | |
| Red Hat | Red Hat Enterprise Linux 8.8 Telecommunications Update Service | 0:4.17.5-7.el8_8.1 ~ * | cpe:/a:redhat:rhel_e4s:8.8::appstream | |
| Red Hat | Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions | 0:4.17.5-7.el8_8.1 ~ * | cpe:/a:redhat:rhel_e4s:8.8::appstream | |
| Red Hat | Red Hat Enterprise Linux 9 | 0:4.23.5-10.el9_8 ~ * | cpe:/a:redhat:enterprise_linux:9::appstream | |
| Red Hat | Red Hat Enterprise Linux 9 | 0:4.23.5-10.el9_8 ~ * | cpe:/a:redhat:enterprise_linux:9::appstream | |
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions | 0:4.17.5-105.el9_2.5 ~ * | cpe:/a:redhat:rhel_e4s:9.2::appstream | |
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions | 0:4.19.4-105.el9_4.4 ~ * | cpe:/a:redhat:rhel_e4s:9.4::appstream | |
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support | 0:4.21.3-14.el9_6.1 ~ * | cpe:/a:redhat:rhel_eus:9.6::appstream | |
| Red Hat | Red Hat OpenShift Container Platform 4.19 | 4.19.9.6.202606241344-0 ~ * | cpe:/a:redhat:openshift:4.19::el9 | |
| Red Hat | Red Hat Enterprise Linux 6 | - | cpe:/o:redhat:enterprise_linux:6 | |
| Red Hat | Red Hat Enterprise Linux 6 | - | cpe:/o:redhat:enterprise_linux:6 | |
| Red Hat | Red Hat Enterprise Linux 7 | - | cpe:/o:redhat:enterprise_linux:7 |
II. CVE-2026-3012の公開POC
| # | POC説明 | ソースリンク | Shenlongリンク |
|---|
AI生成POCプレミアム
公開POCは見つかりませんでした。
ログインしてAI POCを生成III. CVE-2026-3012のインテリジェンス情報
请登录查看更多情报信息。
CVE-2026-3012 补丁与修复 (1)
CVE-2026-3012 厂商安全公告 (4)
- 🔗 2447319 – (CVE-2026-3012) CVE-2026-3012 samba: group policy certificate enrollment uses http:// without validation 記事全文を読む issue-trackingx_refsource_REDHAT
- 🔗 RHSA-2026:22963 - Security Advisory - Red Hat Customer Portal 記事全文を読む vendor-advisoryx_refsource_REDHAT
CVE-2026-3012 其他参考 (7)
Same Patch Batch · Red Hat · 2026-05-27 · 5 CVEs total
| CVE-2026-1933 | 7.1 HIGH | Samba: missing access check on reparse point operations |
| CVE-2026-9704 | 6.8 MEDIUM | Keycloak: keycloak: privilege escalation due to oversized subject_token jwt |
| CVE-2026-2340 | 6.5 MEDIUM | Samba: vfs_worm does not block directory modification |
| CVE-2026-9689 | 4.2 MEDIUM | Keycloak: org.keycloak.protocol.oidc: http parameter pollution in oidc redirect uri allows |
IV. 関連脆弱性
- CVE-2026-68563
Ansible-collection-redhat-leapp: ansible-collection-redhat-l - CVE-2026-68562
Ansible-collection-redhat-leapp: ansible-collection-redhat-l - CVE-2026-58216
Samba: kpasswd service: kpasswd packet that contains malform - CVE-2026-58222
Samba: samba ad ldap compare filter injection and trusted-re - CVE-2026-58218
Samba: dns signing dos via tkey name cache exhaustion
同じベンダー: Red Hat
- CVE-2026-18141
Aap-gateway: aap-gateway: authentication bypass in event-dri - CVE-2026-11770
389-ds-base: 389-ds-base: pre-auth ldap filter injection in - CVE-2026-15722
389-ds-base: 389-ds-base: pre-authentication stack buffer ov - CVE-2026-10079
Stackrox: stackrox: deploy-time policy enforcement and visib - CVE-2026-18209
Keycloak-services: keycloak-services: oidc redirect_uri frag
同じ弱点: CWE-345
- CVE-2026-28145
WordPress MasterStudy LMS plugin <= 3.7.39 - Broken Access C - CVE-2026-10079
Stackrox: stackrox: deploy-time policy enforcement and visib - CVE-2026-62995
joserfc accepts JWT with padding, leading to JWT malleabilit - CVE-2026-59247
Insufficient verification of Hex package metadata in Gleam - CVE-2026-12383
Eda-server: externaleventstreamviewset trusts subject header
V. CVE-2026-3012へのコメント
まだコメントはありません