Title

Microsoft Windows Kerberos Privilege Escalation Vulnerability (Cat I impact)

Discussion

Microsoft has released a security bulletin addressing a vulnerability in Windows implementations of Kerberos. Kerberos is a protocol used to authenticate users and services on an unsecured network. To exploit this vulnerability, an attacker would send the Kerberos KDC a forged Kerberos ticket which claims the user is a domain administrator. If successfully exploited, this vulnerability would elevate the attacker's privileges to domain administrator and compromise the target system.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-57571

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.