Описание
A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages. To exploit this vulnerability, an attacker could send a specially crafted authentication request. An attacker who successfully exploited this vulnerability could access another machine using the original user privileges. The issue has been addressed by changing how NTLM validates network authentication messages.
Ссылки
- Third Party Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Одно из
EPSS
8.5 High
CVSS3
8.5 High
CVSS3
6 Medium
CVSS2
Дефекты
Связанные уязвимости
A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages.To exploit this vulnerability, an attacker could send a specially crafted authentication request, aka 'Microsoft Windows Security Feature Bypass Vulnerability'.
Уязвимость службы Netlogon операционной системы Windows, позволяющаяя нарушителю обойти существующие ограничения безопасности
EPSS
8.5 High
CVSS3
8.5 High
CVSS3
6 Medium
CVSS2