2 results · Clear filters · Feed
-
Medium 5.9
cifs.upcall makes an upcall to the wrong namespace in containerized environments
A flaw was found in cifs-utils. When trying to obtain Kerberos credentials, the cifs.upcall program from the cifs-utils package makes an upcall to the wrong namespace in containerized environments. This issue may lead to disclosing sensitive data from the hos…
-
Medium 4.4
It was found that cifs-utils' mount.cifs was invoking a shell when requesting the Samba password, which could be used t…