CVE-2023-34968 — Samba: spotlight server-side share path disclosure
A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of shares, files, and directories in the res…
Published: 2023-07-20 · CVSS: 5.3 · CVSS 3.1
A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of shares, files, and directories in the results for search queries. This flaw allows a malicious client or an attacker with a targeted RPC request to view the information that is part of the disclosed path.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7