Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-g5hg-3x62-v52f

Опубликовано: 07 мар. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-hmac-sha1-96).

Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-hmac-sha1-96).

EPSS

Процентиль: 68%
0.00577
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-326
CWE-327
CWE-328

Связанные уязвимости

CVSS3: 9.8
ubuntu
почти 3 года назад

Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-hmac-sha1-96).

CVSS3: 8.1
redhat
около 3 лет назад

Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-hmac-sha1-96).

CVSS3: 9.8
nvd
почти 3 года назад

Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-hmac-sha1-96).

CVSS3: 9.8
msrc
больше 1 года назад

Описание отсутствует

CVSS3: 9.8
debian
почти 3 года назад

Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerabili ...

EPSS

Процентиль: 68%
0.00577
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-326
CWE-327
CWE-328