CVE-2023-32021

Меры по смягчению последствий

The following mitigating factors might be helpful in your situation:

• Only AD-detached clusters with Scale-out File server role installed are affected by this vulnerability. https://learn.microsoft.com/previous-versions/windows/it-pro/windows-server-2012-r2-and-2012/dn265970(v=ws.11)
• Version: AD-detached cluster is available on Windows Server 2012 R2 and above.

FAQ

What kind of security feature could be bypassed by successfully exploiting this vulnerability?

An attacker who successfully exploited this vulnerability could execute RPC procedures that are restricted to privileged accounts, bypassing the access check for the RPC procedures.

How could an attacker exploit the vulnerability?

To exploit this vulnerability, an attacker could execute a specially crafted malicious script which executes an RPC call to a Windows SMB Witness Service.