Published: 09/11/2022 Updated: 17/09/2023

CVSS v3 Base Score: 8.1 | Impact Score: 5.9 | Exploitability Score: 2.2

VMScore: 0

Subscribe to Windows Server 2008

Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft windows server 2008 r2
microsoft windows server 2012 r2
microsoft windows server 2016 -
microsoft windows server 2008 -
microsoft windows server 2012 -
microsoft windows server 2019 -
microsoft windows server 2022 -
fedoraproject fedora 36
fedoraproject fedora 37
netapp management services for element software -
netapp management services for netapp hci -
samba samba

Several security issues were fixed in Samba ...

DescriptionThe MITRE CVE dictionary describes this issue as: Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability ...

Severity Unknown Remote Unknown Type Unknown Description AVG-2828 samba 4174-4 4175-1 Unknown Fixed ...

11B checker This is a sample PowerShell script to help detect potential authentication issues that may occur in an AD environment after installing Windows Update from November 2022 or newer The msDS-SupportedEncryptionTypes attribute that is mentioned in the script is an attribute that can be configured on AD objects such as computers and users to signify as a bitmap the types

Links, Lösungsansätze [18112022] MS OOB Update released Cumulative updates: Windows Server 2022: KB5021656 Windows Server 2019: KB5021655 Windows Server 2016: KB5021654 [14112022] event-id-144771-benutzer-koennen-sich-nach-november-update-nicht-anmelden !! Aktuell scheint es Probleme mit den Patches zu geben !! Siehe Lösungsansätze November-Update bringt

Microsoft's attempts to harden Kerberos authentication broke it on Windows Servers

The Register

Topics Security Off-Prem On-Prem Software Offbeat Vendor Voice Vendor Voice Resources Emergency out-of-band updates to the rescue

Microsoft is rolling out fixes for problems with the Kerberos network authentication protocol on Windows Server after it was broken by November Patch Tuesday updates. As we reported last week, updates released November 8 or later that were installed on Windows Server with the Domain Controller duties of managing network and identity security requests disrupted Kerberos authentication capabilities, ranging from failures in domain user sign-ins and Group Managed Service Accounts authentication to ...

CVE-2022-37966

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

Recent Articles

References

Vulmon Search

About

Products

Connect