Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2m43-qgqq-69c7

Опубликовано: 04 дек. 2024
Источник: github
Github: Не прошло ревью
CVSS3: 7.7

Описание

A vulnerability exists where a low-privileged user can exploit insufficient permissions in credential handling to leak NTLM hashes of saved credentials. The exploitation involves using retrieved credentials to expose sensitive NTLM hashes, impacting systems beyond the initial target and potentially leading to broader security vulnerabilities.

A vulnerability exists where a low-privileged user can exploit insufficient permissions in credential handling to leak NTLM hashes of saved credentials. The exploitation involves using retrieved credentials to expose sensitive NTLM hashes, impacting systems beyond the initial target and potentially leading to broader security vulnerabilities.

EPSS

Процентиль: 28%
0.00354
Низкий

7.7 High

CVSS3

Дефекты

CWE-863

Связанные уязвимости

CVSS3: 4.3
nvd
больше 1 года назад

A vulnerability exists where a low-privileged user can exploit insufficient permissions in credential handling to leak NTLM hashes of saved credentials. The exploitation involves using retrieved credentials to expose sensitive NTLM hashes, impacting systems beyond the initial target and potentially leading to broader security vulnerabilities.

EPSS

Процентиль: 28%
0.00354
Низкий

7.7 High

CVSS3

Дефекты

CWE-863