Lucene search

K
attackerkbAttackerKBAKB:D354FE9E-B72A-4328-93DD-28578E160D9B
HistoryNov 11, 2020 - 12:00 a.m.

CVE-2020-17049

2020-11-1100:00:00
attackerkb.com
59

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.022 Low

EPSS

Percentile

88.1%

Kerberos Security Feature Bypass Vulnerability

Recent assessments:

jakekarnes42 at December 09, 2020 12:26am UTC reported:

Technical analysis and exploit of the vulnerability are now publicly available:
<https://blog.netspi.com/cve-2020-17049-kerberos-bronze-bit-overview/&gt;
<https://blog.netspi.com/cve-2020-17049-kerberos-bronze-bit-theory/&gt;
<https://blog.netspi.com/cve-2020-17049-kerberos-bronze-bit-attack/&gt;

SusanBradley at November 23, 2020 3:37am UTC reported:

Technical analysis and exploit of the vulnerability are now publicly available:
<https://blog.netspi.com/cve-2020-17049-kerberos-bronze-bit-overview/&gt;
<https://blog.netspi.com/cve-2020-17049-kerberos-bronze-bit-theory/&gt;
<https://blog.netspi.com/cve-2020-17049-kerberos-bronze-bit-attack/&gt;

Assessed Attacker Value: 0
Assessed Attacker Value: 0Assessed Attacker Value: 0

7.2 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

9 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

0.022 Low

EPSS

Percentile

88.1%