CVE-2019-1384

EPSS 6.1%

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 6.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

12 nov 2019Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages.To exploit this vulnerability, an attacker could send a specially crafted authentication request, aka 'Microsoft Windows Security Feature Bypass Vulnerability'.

Produtos afetados

Microsoft · Windows Microsoft · Windows 10 Version 1903 for 32-bit Systems Microsoft · Windows 10 Version 1903 for ARM64-based Systems Microsoft · Windows 10 Version 1903 for x64-based Systems Microsoft · Windows Server Microsoft · Windows Server, version 1903 (Server Core installation)

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1384