CVE-2023-29062

CVE-2023-29062 describes a vulnerability in the OS hosting BD FACSChorus where user credentials may be transmitted as NTLMv2 hashes via LLMNR, MBT-NS, or MDNS, if the identity of requested resources is not adequately validated. Affected products are BD FACSChorus software and workstations (versio...

PT-2023-22119 · Unknown · Operating System

Name of the Vulnerable Software and Affected Versions: Operating System affected versions not specified Description: The issue arises when the Operating System hosting the FACSChorus application is configured to allow transmission of hashed user credentials without properly validating the identit...

Block Older versions of workspace app for domain joined endpoint/Client machines.

This article will assist with the inquiry of is there a way to block certain older versions of Workspace App/Receiver from accessing a Citrix environment?...

Citrix Secure Access for Windows fails to allow traffic through VPN after an upgrade to 23.x.x.x

After a successful connection to the Citrix Secure Access CSA client in full tunnel, none of the traffic passes through the VPN. Access to the applications using an IP address or DNS over the tunnel is blocked. The issue is limited to domain-joined machines where the Intranet IP address is...

How to configure EPA domain check combined with Smartaccess feature

Configuring the EPA policy to identify the Client domainjoined info, distinguishing with/without the domain info, then enumerating different resources for user...

CVE-2022-22031

Windows Credential Guard Domain-joined Public Key Elevation of Privilege Vulnerability...

CVE-2022-22031

Windows Credential Guard Domain-joined Public Key Elevation of Privilege Vulnerability...

CVE-2022-22031

Windows Credential Guard Domain-joined Public Key Elevation of Privilege Vulnerability...

CVE-2022-22031 Windows Credential Guard Domain-joined Public Key Elevation of Privilege Vulnerability

...

CVE-2022-22031 Windows Credential Guard Domain-joined Public Key Elevation of Privilege Vulnerability

...

CVE-2022-22031

Technical details about CVE-2022-22031 (Windows Credential Guard domain-joined public key privilege elevation) are not publicly provided in the supplied documents. No affected products, versions, root cause, impact, or fixes are specified here; monitor for updates from the cited sources.

Windows Credential Guard Domain-joined Public Key Elevation of Privilege Vulnerability

...

PT-2021-2637 · Microsoft · Windows Wlan Autoconfig Service +1

Name of the Vulnerable Software and Affected Versions: Windows WLAN AutoConfig Service versions prior to the fixed version Description: The issue is related to errors in security settings of the Windows WLAN service, allowing an attacker to gain unauthorized access to protected information. This...

Why Cached Credentials Can Cause Account Lockouts and How to Stop it

When a user account becomes locked out, the cause is often attributed to a user who has simply entered an old or incorrect password too many times. However, this is far from being the only thing that can cause an account to become locked. Another common cause, for example, is an application or...

BitLocker can't encrypt drives because of service crashes in svchost.exe process in Windows 7 or Windows Server 2008 R2

BitLocker can't encrypt drives because of service crashes in svchost.exe process in Windows 7 or Windows Server 2008 R2 This article describes an issue in which BitLocker can't encrypt the drive and the service crashes in Windows 7 Service Pack 1 SP1 or Windows Server 2008 R2 SP1. An update is...

Grouper2 - Find Vulnerabilities In AD Group Policy

What is it for? Grouper2 is a tool for pentesters to help find security-related misconfigurations in Active Directory Group Policy. It might also be useful for other people doing other stuff, but it is explicitly NOT meant to be an audit tool. If you want to check your policy configs against some...

CVE-2019-13517

In Pyxis ES Versions 1.3.4 through to 1.6.1 and Pyxis Enterprise Server, with Windows Server Versions 4.4 through 4.12, a vulnerability has been identified where existing access privileges are not restricted in coordination with the expiration of access based on active directory user account...

Microsoft Windows: Do not enumerate connected users on domain-joined computers

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winenumerateconnectedusers.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Do not enumerate connected users on domain-joined computers Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH,...

Microsoft Windows: Enumerate local users on domain-joined computers

This test checks the setting for policy OpenVAS Vulnerability Test $Id: winenumeratelocalusers.nasl 11337 2018-09-11 14:23:53Z emoss $ Check value for Enumerate local users on domain-joined computers Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks GmbH, http://www.greenbone.n...

Microsoft Windows: Prevent the computer from joining a homegroup

This policy setting specifies whether users can add computers to a homegroup. By default, users can add their computer to a homegroup on a private network. If you enable this policy setting, users cannot add computers to a homegroup. This policy setting does not affect other network sharing...