225 matches found
Netwrix Auditor Installed (Windows)
Binary data netwrixauditorwininstalled.nbin...
New Netwrix Auditor Bug Could Let Attackers Compromise Active Directory Domain
Researchers have disclosed details about a security vulnerability in the Netwrix Auditor application that, if successfully exploited, could lead to arbitrary code execution on affected devices. "Since this service is typically executed with extensive privileges in an Active Directory environment,...
PT-2022-6710
Name of the Vulnerable Software and Affected Versions Netwrix Auditor affected versions not specified Description The issue is related to insufficient deserialization mechanisms in the User Activity Video Recording component of Netwrix Auditor. This can be exploited by a remote attacker to execut...
CVE-2020-15931
Netwrix Account Lockout Examiner before 5.1 allows remote attackers to capture the Net-NTLMv1/v2 authentication challenge hash of the Domain Administrator that is configured within the product in its installation state by generating a single Kerberos Pre-Authentication Failed ID 4771 event on a...
Authentication flaw
Netwrix Account Lockout Examiner before 5.1 allows remote attackers to capture the Net-NTLMv1/v2 authentication challenge hash of the Domain Administrator that is configured within the product in its installation state by generating a single Kerberos Pre-Authentication Failed ID 4771 event on a...
CVE-2020-15931
Netwrix Account Lockout Examiner before 5.1 allows remote attackers to capture the Net-NTLMv1/v2 authentication challenge hash of the Domain Administrator that is configured within the product in its installation state by generating a single Kerberos Pre-Authentication Failed ID 4771 event on a...
CVE-2020-15931
Netwrix Account Lockout Examiner prior to 5.1 is affected. The issue enables remote attackers to capture the Domain Administrator’s Net-NTLMv1/v2 challenge hashes by eliciting a single Kerberos Pre-Authentication Failed (Event ID 4771) on a Domain Controller. Affected component is the Netwrix ALE...
CVE-2020-15931: Exposure of Sensitive Information to an Unauthorized Actor
Netwrix Account Lockout Examiner before 5.1 allows remote attackers to capture the Net-NTLMv1/v2 authentication challenge hash of the Domain Administrator that is configured within the product in its installation state by generating a single Kerberos Pre-Authentication Failed ID 4771 event on a...
PT-2020-14724
Name of the Vulnerable Software and Affected Versions Netwrix Account Lockout Examiner versions prior to 5.1 Description The issue allows remote attackers to capture the Net-NTLMv1/v2 authentication challenge hash of the Domain Administrator by generating a single Kerberos Pre-Authentication Fail...
netwrix.fr Cross Site Scripting vulnerability OBB-1382433
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Netwrix Account_Lockout_Examiner
CVE-2020-15931 Netwrix Account Lockout Examiner 4.1 Domai...
CVE-2019-14969
Netwrix Auditor before 9.8 has insecure permissions on %PROGRAMDATA%\Netwrix Auditor\Logs\ActiveDirectory\ and sub-folders. In addition, the service Netwrix.ADA.StorageAuditService which writes to that directory does not perform proper impersonation, and thus the target file will have the same...
Design/Logic Flaw
Netwrix Auditor before 9.8 has insecure permissions on %PROGRAMDATA%\Netwrix Auditor\Logs\ActiveDirectory\ and sub-folders. In addition, the service Netwrix.ADA.StorageAuditService which writes to that directory does not perform proper impersonation, and thus the target file will have the same...
CVE-2019-14969
Netwrix Auditor before 9.8 has insecure permissions on %PROGRAMDATA%\Netwrix Auditor\Logs\ActiveDirectory\ and sub-folders. In addition, the service Netwrix.ADA.StorageAuditService which writes to that directory does not perform proper impersonation, and thus the target file will have the same...
CVE-2019-14969
Netwrix Auditor pre-9.8 is affected by insecure permissions on %PROGRAMDATA%\Netwrix Auditor\Logs\ActiveDirectory\ and its subfolders. The Netwrix.ADA.StorageAuditService writes to that directory and does not impersonate properly, so target files inherit the invoking process’s permissions, granti...
CVE-2019-14969: Incorrect Permission Assignment for Critical Resource
Netwrix Auditor before 9.8 has insecure permissions on %PROGRAMDATA%\Netwrix Auditor\Logs\ActiveDirectory\ and sub-folders. In addition, the service Netwrix.ADA.StorageAuditService which writes to that directory does not perform proper impersonation, and thus the target file will have the same...
PT-2019-13903
Name of the Vulnerable Software and Affected Versions Netwrix Auditor versions prior to 9.8 Description The issue is related to insecure permissions on certain directories and sub-folders, specifically %PROGRAMDATA%Netwrix AuditorLogsActiveDirectory. The Netwrix.ADA.StorageAuditService service,...
netwrix.com XSS vulnerability
Open Bug Bounty ID: OBB-719311 Description| Value ---|--- Affected Website:| netwrix.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unti...
netwrix.com XSS vulnerability
Open Bug Bounty ID: OBB-700261 Description| Value ---|--- Affected Website:| netwrix.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Netwrix Auditor 7.1.322.0 - ActiveX sourceFile Stack Buffer Overflow
Netwrix Auditor 7.1.322.0 - ActiveX sourceFile Stack Buffer Overflow Netwrix Auditor 7.1.322.0 ActiveX sourceFile Stack Buffer Overflow Vulnerability Vendor: Netwrix Corporation Product web page: http://www.netwrix.com Affected version: 7.1 Build 322 Summary: Netwrix Auditor is an IT audit...