Sales Chat - Click Here

Default sending new or reset passwords over a signed-only connection in AD DC admin tool


Jun 23, 2023

Default sending new or reset passwords over a signed-only connection in AD DC admin tool

Summary

This vulnerability applies to functionality when the system is acting as an Active Directory domain controller. No Buffalo NAS products use this functionality, and so no Buffalo sytems are affected by this vulnerability.

Vulnerability ID Vulnerability Overview
CVE-2023-0922 The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection.

Affected Supported TeraStations

None

Back to Security Notices

Date Description
6/23/2022 Initial release
X