Lucene search

K
cvelistMicrosoftCVELIST:CVE-2011-0091
HistoryFeb 10, 2011 - 3:00 p.m.

CVE-2011-0091

2011-02-1015:00:00
microsoft
www.cve.org

5.7 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.1%

Kerberos in Microsoft Windows Server 2008 R2 and Windows 7 does not prevent a session from changing from strong encryption to DES encryption, which allows man-in-the-middle attackers to spoof network traffic and obtain sensitive information via a DES downgrade, aka “Kerberos Spoofing Vulnerability.”

5.7 Medium

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

80.1%