CVE-2023-34968

Summary

CVE-2023-34968 is a path disclosure vulnerability affecting Samba. During Spotlight protocol processing, Samba inadvertently reveals the absolute server-side paths of shares, files, and directories in search query results. This issue poses a risk as it enables a malicious client or an attacker to uncover sensitive information within the disclosed path.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.