Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2m43-qgqq-69c7

Опубликовано: 04 дек. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.7

Описание

A vulnerability exists where a low-privileged user can exploit insufficient permissions in credential handling to leak NTLM hashes of saved credentials. The exploitation involves using retrieved credentials to expose sensitive NTLM hashes, impacting systems beyond the initial target and potentially leading to broader security vulnerabilities.

A vulnerability exists where a low-privileged user can exploit insufficient permissions in credential handling to leak NTLM hashes of saved credentials. The exploitation involves using retrieved credentials to expose sensitive NTLM hashes, impacting systems beyond the initial target and potentially leading to broader security vulnerabilities.

EPSS

Процентиль: 37%
0.00162
Низкий

7.7 High

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 4.3
nvd
около 1 года назад

A vulnerability exists where a low-privileged user can exploit insufficient permissions in credential handling to leak NTLM hashes of saved credentials. The exploitation involves using retrieved credentials to expose sensitive NTLM hashes, impacting systems beyond the initial target and potentially leading to broader security vulnerabilities.

EPSS

Процентиль: 37%
0.00162
Низкий

7.7 High

CVSS3

Дефекты

CWE-863