CVE-2017-11786

🗓️ 13 Oct 2017 13:00:00Reported by microsoftType

Skype for Business allows stealing authentication hash, leading to elevation of privilege

Reporter	Title	Published	Views	Family All 16
BDU FSTEC	The vulnerability of Skype for Business and Microsoft Lync messaging programs, related to deficiencies in access control, allows attackers to steal authentication hash codes.	23 Nov 201700:00	–	bdu_fstec
CNVD	Microsoft Skype for Business Elevation of Privilege Vulnerability	11 Oct 201700:00	–	cnvd
CVE	CVE-2017-11786	13 Oct 201713:00	–	cve
Microsoft KB	Description of the security update for Skype for Business 2016: October 10, 2017	10 Oct 201707:00	–	mskb
Microsoft KB	Security update 2017-10-10	10 Oct 201707:00	–	mskb
Kaspersky	KLA11113 Multiple vulnerabilities in Microsoft Office	10 Oct 201700:00	–	kaspersky
Microsoft CVE	Skype for Business Elevation of Privilege Vulnerability	10 Oct 201707:00	–	mscve
myhack58	Microsoft windows October release of the 62 flaws vulnerability bug patch, and repair of the National researchers submitted the 0-day flaw vulnerability bug-vulnerability warning-the black bar safety net	12 Oct 201700:00	–	myhack58
NVD	CVE-2017-11786	13 Oct 201713:29	–	nvd
OpenVAS	Microsoft Lync 2013 Service Pack 1 Elevation of Privilege Vulnerability (KB4011179)	11 Oct 201700:00	–	openvas

[
  {
    "product": "Skype for Business",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Microsoft Lync 2013 SP1 and Skype for Business 2016"
      }
    ]
  }
]

Source	Link
securitytracker	www.securitytracker.com/id/1039530
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11786
securityfocus	www.securityfocus.com/bid/101156

14 Oct 2017 09:57Current

8.8High risk

Vulners AI Score8.8

EPSS0.11493