CVE-2015-8771: Gosa Project Gosa Plugin

Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days.

The generate_smb_nt_hash function in include/functions.inc in GOsa allows remote attackers to execute arbitrary commands via a crafted password.

Affected products

• Gosa Project Gosa Plugin: any version

Published 2017-02-13. Last modified 2026-06-17.