CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.2. Its EPSS score suggests a 13.3% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2015-5252
Severity
HIGH
CVSS
7.2
EPSS
13.27%
Original NVD Description
vfs.c in smbd in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, when share names with certain substring relationships exist, allows remote attackers to bypass intended file-access restrictions via a symlink that points outside of a share.