Title

Microsoft Group Policy Security Feature Bypass Vulnerability (MS15-014) (Cat I impact)

Discussion

Microsoft has released a security advisory addressing a vulnerability in Group Policy. To exploit this vulnerability, an attacker would locate a system which can modify domain controller responses to client requests. If successfully exploited, the attacker would be able to corrupt the Group Policy Security Configuration Engine policy file and compromise the system.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-58755

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.