Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5fqm-f4f4-5vpq

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.5

Описание

A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages.To exploit this vulnerability, an attacker could send a specially crafted authentication request, aka 'Microsoft Windows Security Feature Bypass Vulnerability'.

A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages.To exploit this vulnerability, an attacker could send a specially crafted authentication request, aka 'Microsoft Windows Security Feature Bypass Vulnerability'.

EPSS

Процентиль: 89%
0.04674
Низкий

8.5 High

CVSS3

Дефекты

CWE-200

Связанные уязвимости

CVSS3: 8.5
nvd
около 6 лет назад

A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages. To exploit this vulnerability, an attacker could send a specially crafted authentication request. An attacker who successfully exploited this vulnerability could access another machine using the original user privileges. The issue has been addressed by changing how NTLM validates network authentication messages.

CVSS3: 8.5
msrc
около 6 лет назад

Microsoft Windows Security Feature Bypass Vulnerability

CVSS3: 8.5
fstec
около 6 лет назад

Уязвимость службы Netlogon операционной системы Windows, позволяющаяя нарушителю обойти существующие ограничения безопасности

EPSS

Процентиль: 89%
0.04674
Низкий

8.5 High

CVSS3

Дефекты

CWE-200