Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j53r-gx3g-g877

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

Microsoft Windows 8.1, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 do not properly check NTLM SSO requests for MSA logins, which makes it easier for remote attackers to determine passwords via a brute-force attack on NTLM password hashes, aka "Microsoft Information Disclosure Vulnerability."

Microsoft Windows 8.1, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 do not properly check NTLM SSO requests for MSA logins, which makes it easier for remote attackers to determine passwords via a brute-force attack on NTLM password hashes, aka "Microsoft Information Disclosure Vulnerability."

EPSS

Процентиль: 97%
0.3289
Средний

8.8 High

CVSS3

Дефекты

CWE-285

Связанные уязвимости

CVSS3: 8.8
nvd
около 9 лет назад

Microsoft Windows 8.1, Windows RT 8.1, and Windows 10 Gold, 1511, and 1607 do not properly check NTLM SSO requests for MSA logins, which makes it easier for remote attackers to determine passwords via a brute-force attack on NTLM password hashes, aka "Microsoft Information Disclosure Vulnerability."

CVSS3: 6.5
msrc
12 месяцев назад

Windows Information Disclosure Vulnerability

fstec
около 9 лет назад

Уязвимость операционной системы Windows, позволяющая нарушителю подобрать пароль

EPSS

Процентиль: 97%
0.3289
Средний

8.8 High

CVSS3

Дефекты

CWE-285