Samba: Mutual Authentication Validation Bypass (CVE-2017-11103) and Spectrum

Products

• CA Spectrum

Issue/Introduction

A MITM attacker may impersonate a trusted server and thus gain elevated access to the domain by  returning malicious replication or authorization data.

https://www.samba.org/samba/security/CVE-2017-11103.html

 

 

 

Is Spectrum susceptible to the Samba: Mutual Authentication Validation Bypass  vulnerability and if so, are there any plans to protect against it? 

Environment

Release:
Component:

Resolution

Spectrum is not affected by this vulnerability as we don’t use any samba server related calls or are any libraries included in the deployment.

Additional Information

Please contact CA Support if any questions.