Lucene search

K
nvd[email protected]NVD:CVE-2024-38239
HistorySep 10, 2024 - 5:15 p.m.

CVE-2024-38239

2024-09-1017:15:27
CWE-1390
web.nvd.nist.gov
1
cve-2024-38239
windows
kerberos
elevation of privilege
vulnerability

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

16.8%

Windows Kerberos Elevation of Privilege Vulnerability

Affected configurations

Nvd
Node
microsoftwindows_10_1507Range<10.0.10240.20766x64
OR
microsoftwindows_10_1507Range<10.0.10240.20766x86
OR
microsoftwindows_10_1607Range<10.0.14393.7336x64
OR
microsoftwindows_10_1607Range<10.0.14393.7336x86
OR
microsoftwindows_10_1809Range<10.0.17763.6293
OR
microsoftwindows_10_21h2Range<10.0.19044.4894
OR
microsoftwindows_10_22h2Range<10.0.19045.4894arm64
OR
microsoftwindows_10_22h2Range<10.0.19045.4894x64
OR
microsoftwindows_10_22h2Range<10.0.19045.4894x86
OR
microsoftwindows_11_21h2Range<10.0.22000.3197
OR
microsoftwindows_11_22h2Range<10.0.22621.4169
OR
microsoftwindows_11_23h2Range<10.0.22621.4169arm64
OR
microsoftwindows_11_23h2Range<10.0.22631.4169x64
OR
microsoftwindows_11_24h2Range<10.0.26100.1742arm64
OR
microsoftwindows_11_24h2Range<10.0.26100.1742x64
OR
microsoftwindows_server_2008Match-sp2x64
OR
microsoftwindows_server_2008Match-sp2x86
OR
microsoftwindows_server_2008Matchr2x64
OR
microsoftwindows_server_2012Match-x64
OR
microsoftwindows_server_2012Matchr2x64
OR
microsoftwindows_server_2016Range<10.0.14393.7336
OR
microsoftwindows_server_2019Range<10.0.17763.6293
OR
microsoftwindows_server_2022Range<10.0.20348.2700
OR
microsoftwindows_server_2022_23h2Range<10.0.25398.1128
VendorProductVersionCPE
microsoftwindows_10_1507*cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*
microsoftwindows_10_1507*cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*
microsoftwindows_10_1607*cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*
microsoftwindows_10_1607*cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*
microsoftwindows_10_1809*cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*
microsoftwindows_10_21h2*cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*
microsoftwindows_10_22h2*cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*
microsoftwindows_10_22h2*cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x64:*
microsoftwindows_10_22h2*cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*
microsoftwindows_11_21h2*cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*
Rows per page:
1-10 of 241

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

16.8%