PT-2022-5616 · Microsoft · Windows Cryptoapi +1

🗓️ 11 Oct 2022 00:00:00Reported by Positive TechnologiesType

Spoofing flaw in Windows CryptoAPI may bypass authentication and enable MITM with forged certs.

Reporter	Title	Published	Views	Family All 48
ATTACKERKB	CVE-2022-34689	11 Oct 202219:15	–	attackerkb
Circl	CVE-2022-34689	11 Oct 202222:32	–	circl
CNNVD	Microsoft Windows CryptoAPI 安全漏洞	11 Oct 202200:00	–	cnnvd
CNVD	Microsoft Windows CryptoAPI has an unspecified vulnerability	14 Oct 202200:00	–	cnvd
CVE	CVE-2022-34689	11 Oct 202200:00	–	cve
Cvelist	CVE-2022-34689 Windows CryptoAPI Spoofing Vulnerability	11 Oct 202200:00	–	cvelist
Hive Pro Threat Advisories	Proof-of-concept released for Windows CryptoAPI vulnerability	1 Feb 202305:51	–	hivepro
Microsoft KB	August 9, 2022—KB5016616 (OS Builds 19042.1889, 19043.1889, and 19044.1889)	11 Oct 202207:00	–	mskb
Microsoft KB	August 9, 2022—KB5016622 (OS Build 14393.5291) - EXPIRED	11 Oct 202207:00	–	mskb
Microsoft KB	August 9, 2022—KB5016623 (OS Build 17763.3287)	11 Oct 202207:00	–	mskb

Source	Link
github	www.github.com/akamai/akamai-security-research/tree/main/PoCs/CVE-2022-34689
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-34689
bdu	www.bdu.fstec.ru/vul/2022-06982
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-34689
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
msrc	www.msrc.microsoft.com/update-guide/en-US/advisory/CVE-2022-34689
msrc	www.msrc.microsoft.com/update-guide/vulnerability/CVE-2022-34689
t	www.t.me/cvenotify/64507
t	www.t.me/sysadm_in_up/1515
t	www.t.me/cvenotify/106096