Launchpad.net

CVE 2023-0922

The Samba AD DC administration tool, when operating against a remote LDAP server, will by default send new or reset passwords over a signed-only connection.

See the CVE page on Mitre.org for more details.