Lucene search

[email protected]CVE-2024-21427

HistoryMar 12, 2024 - 5:15 p.m.

CVE-2024-21427

2024-03-1217:15:51

CWE-287

[email protected]

web.nvd.nist.gov

174

cve-2024-21427

windows

kerberos

security

feature

bypass

vulnerability

nvd

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

4.6 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:S/C:P/I:P/A:P

0.001 Low

EPSS

Percentile

18.9%

JSON

Windows Kerberos Security Feature Bypass Vulnerability

VendorProductVersionCPE
microsoftwindows_server_2019*cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
microsoftwindows_server_2019*cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
microsoftwindows_server_2022*cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*
microsoftwindows_server_2022*cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*
microsoftwindows_server_23h2*cpe:2.3:o:microsoft:windows_server_23h2:*:*:*:*:*:*:*:*
microsoftwindows_server_2016*cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
microsoftwindows_server_2016*cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*
microsoftwindows_server_2012_r2*cpe:2.3:o:microsoft:windows_server_2012_r2:*:*:*:*:*:*:*:*
microsoftwindows_server_2012_r2*cpe:2.3:o:microsoft:windows_server_2012_r2:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	windows_server_2019	*	cpe:2.3:o:microsoft:windows_server_2019::::::::
microsoft	windows_server_2019	*	cpe:2.3:o:microsoft:windows_server_2019::::::::
microsoft	windows_server_2022	*	cpe:2.3:o:microsoft:windows_server_2022::::::::
microsoft	windows_server_2022	*	cpe:2.3:o:microsoft:windows_server_2022::::::::
microsoft	windows_server_23h2	*	cpe:2.3:o:microsoft:windows_server_23h2::::::::
microsoft	windows_server_2016	*	cpe:2.3:o:microsoft:windows_server_2016::::::::
microsoft	windows_server_2016	*	cpe:2.3:o:microsoft:windows_server_2016::::::::
microsoft	windows_server_2012_r2	*	cpe:2.3:o:microsoft:windows_server_2012_r2::::::::
microsoft	windows_server_2012_r2	*	cpe:2.3:o:microsoft:windows_server_2012_r2::::::::