[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fabhjsz3F886v3kUMuPHrgUdw7CfkCXrOQTxMwzxfEJc":3,"g5a-risk:CVE-2018-16860":188},{"success":4,"data":5,"meta":186},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":44,"epssPercentile":15,"epssTimeSeries":45,"severity":46,"affectedProducts":47,"affectedProductsCount":56,"references":57,"referencesCount":120,"weaknesses":121,"weaknessesCount":130,"isActivelyExploited":131,"cisaInfo":15,"otxData":15,"relatedBlogPosts":132,"seoMetadata":133,"configurations":158,"relatedVendorCves":184,"notableEvents":185},"CVE-2018-16860","What is CVE-2018-16860?","A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to, excluding 4.8.12, 4.9.x up to, excluding 4.9.8 and 4.10.x up to, excluding 4.10.3, when used in AD DC mode. A man in the middle attacker could use this flaw to intercept the request to the KDC and replace the user name (principal) in the request with any desired user name (principal) that exists in the KDC effectively obtaining a ticket for that principal.","A flaw was found in samba's Heimdal KDC implementation, versions 4.8.x up to, excluding 4.8.12, 4.9.x up to, excluding 4.9.8 and 4.10.x up to, excluding 4.10...","2019-07-31T15:15:11.687","2019-08-14T12:15:11.307",7.5,"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":33,"CVSSMetricV40":15},null,[17,29],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":23,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","HIGH","LOW","NONE","UNCHANGED",1.6,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":27,"ImpactScore":28},"secalert@redhat.com","Secondary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":23,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},[34],{"Source":18,"Type":19,"CVSSData":35,"BaseSeverity":38,"ExploitabilityScore":42,"ImpactScore":43,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":36,"VectorString":37,"AccessVector":22,"AccessComplexity":38,"Authentication":39,"ConfidentialityImpact":40,"IntegrityImpact":40,"AvailabilityImpact":40,"BaseScore":41,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:M\u002FAu:S\u002FC:P\u002FI:P\u002FA:P","MEDIUM","SINGLE","PARTIAL",6,6.8,6.4,0.02486,[44,44,44,44,44,44,44],"High",[48,52],{"vendor":49,"product":49,"version":50,"criteria":51,"vulnerable":4},"samba","*","cpe:2.3:a:samba:samba:*:*:*:*:*:*:*:*",{"vendor":53,"product":54,"version":50,"criteria":55,"vulnerable":4},"heimdal_project","heimdal","cpe:2.3:a:heimdal_project:heimdal:*:*:*:*:*:*:*:*",2,[58,62,66,69,72,75,81,84,87,90,93,97,101,104,107,110,116],{"url":59,"source":60,"tags":61},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-08\u002Fmsg00026.html","Opensuse",[],{"url":63,"source":64,"tags":65},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2019\u002FAug\u002F11","Seclists",[],{"url":67,"source":64,"tags":68},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2019\u002FAug\u002F13",[],{"url":70,"source":64,"tags":71},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2019\u002FAug\u002F14",[],{"url":73,"source":64,"tags":74},"http:\u002F\u002Fseclists.org\u002Ffulldisclosure\u002F2019\u002FAug\u002F15",[],{"url":76,"source":77,"tags":78},"https:\u002F\u002Fbugzilla.redhat.com\u002Fshow_bug.cgi?id=CVE-2018-16860","Red Hat",[79,80],"Issue Tracking","Third Party Advisory",{"url":82,"source":64,"tags":83},"https:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2019\u002FAug\u002F21",[],{"url":85,"source":64,"tags":86},"https:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2019\u002FAug\u002F22",[],{"url":88,"source":64,"tags":89},"https:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2019\u002FAug\u002F23",[],{"url":91,"source":64,"tags":92},"https:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2019\u002FAug\u002F25",[],{"url":94,"source":95,"tags":96},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202003-52","Gentoo",[],{"url":98,"source":99,"tags":100},"https:\u002F\u002Fsupport.apple.com\u002FHT210346","Apple",[],{"url":102,"source":99,"tags":103},"https:\u002F\u002Fsupport.apple.com\u002FHT210348",[],{"url":105,"source":99,"tags":106},"https:\u002F\u002Fsupport.apple.com\u002FHT210351",[],{"url":108,"source":99,"tags":109},"https:\u002F\u002Fsupport.apple.com\u002FHT210353",[],{"url":111,"source":112,"tags":113},"https:\u002F\u002Fwww.samba.org\u002Fsamba\u002Fsecurity\u002FCVE-2018-16860.html","Samba",[114,115],"Mitigation","Vendor Advisory",{"url":117,"source":118,"tags":119},"https:\u002F\u002Fwww.synology.com\u002Fsecurity\u002Fadvisory\u002FSynology_SA_19_23","Synology",[],17,[122],{"id":123,"name":124,"description":125,"extendedDescription":126,"status":127,"abstraction":128,"structure":129},"CWE-358","Improperly Implemented Security Check for Standard","The product does not implement or incorrectly implements one or more security-relevant checks as specified by the design of a standardized algorithm, protocol, or technique.","","Draft","Base","Simple",1,false,[],{"title":134,"metaDescription":135,"keywords":136,"canonicalUrl":137,"structuredData":138},"What is CVE-2018-16860? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-16860, a high severity cyber security vulnerability from 2019. A flaw was found in samba's Heimdal KDC implementation, ver...","CVE-2018-16860, CVE-2018-16860 vulnerability, CVE-2018-16860 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, samba security, heimdal_project security, samba vulnerability, heimdal vulnerability","\u002Fwhat-is\u002Fcve-2018-16860",{"@context":139,"@type":140,"headline":134,"description":135,"datePublished":10,"dateModified":11,"author":141,"publisher":145,"about":149,"mainEntityOfPage":153,"articleSection":156,"keywords":157},"https:\u002F\u002Fschema.org","TechArticle",{"@type":142,"name":143,"url":144},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":142,"name":143,"url":144,"logo":146},{"@type":147,"url":148},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":150,"name":6,"description":151,"additionalType":152},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":154,"@id":155},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-16860","Cybersecurity","CVE-2018-16860, CVE-2018-16860 vulnerability, CVE-2018-16860 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[159,176],{"Operator":15,"Negate":15,"Nodes":160},[161],{"Operator":162,"Negate":15,"CPEMatch":163},"OR",[164,168,172],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":165,"VersionStartExcluding":15,"VersionStartIncluding":166,"VersionEndExcluding":167,"VersionEndIncluding":15},"04E9BEFE-FF93-4C6F-B76D-6B8CFE1E5BDD","4.8.0","4.8.12",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":169,"VersionStartExcluding":15,"VersionStartIncluding":170,"VersionEndExcluding":171,"VersionEndIncluding":15},"35DB3E08-0131-4AF2-AB27-D51B401D7D45","4.9.0","4.9.8",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":173,"VersionStartExcluding":15,"VersionStartIncluding":174,"VersionEndExcluding":175,"VersionEndIncluding":15},"895BEC8B-ADBC-4575-B07E-3149A613C4ED","4.10.0","4.10.3",{"Operator":15,"Negate":15,"Nodes":177},[178],{"Operator":162,"Negate":15,"CPEMatch":179},[180],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":181,"VersionStartExcluding":15,"VersionStartIncluding":182,"VersionEndExcluding":15,"VersionEndIncluding":183},"683A4E25-64AF-46AC-BAA8-E56BD9C9840F","0.8","7.5.0",[],[],{"lastModified":11,"cacheTime":187,"version":36},1792356004826,{"score":189,"band":190,"action":191,"scoredAt":192},48,"Medium","Plan remediation","2026-10-16T06:46:36.145797+00:00"]