CVE-2022-45141 - AskarLabs CVE Database

CVE-2022-45141

Vendor N/A

Product Samba

Weakness CWE-328 · Weak hash

Published March 6, 2023

Last update March 6, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-hmac-sha1-96).

Key dates

02Disclosure timeline

March 6, 2023 CVE published

March 6, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-45141 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/328.html

Related vulnerabilities

04Related CVE

CVE-2026-11481 yoanbernabeu grepai Postgres Embedding Cache chunker.go PostgresStore.LookupByContentHash weak hash CVE-2024-47182 Dozzle uses unsafe hash for passwords CVE-2019-13539 Medtronic Valleylab FT10 and FX8 Reversible One-way Hash CVE-2024-56516 free-one-api uses md5 for password storage CVE-2026-10800 PaddlePaddle FastDeploy MultimodalHasher hasher.py hash_features weak hash