4416 matches found
CVE-2022-37978
Windows Active Directory Certificate Services Security Feature Bypass...
CVE-2022-37976
Active Directory Certificate Services Elevation of Privilege Vulnerability...
Privilege escalation
Active Directory Domain Services Elevation of Privilege Vulnerability...
Security feature bypass
Windows Active Directory Certificate Services Security Feature Bypass...
Privilege escalation
Active Directory Certificate Services Elevation of Privilege Vulnerability...
Microsoft Patch Tuesday for October 2022 — Snort rules and prominent vulnerabilities
By Jon Munshaw and Vanja Svajcer. Microsoft released its monthly security update Tuesday, disclosing 83 vulnerabilities across the company’s hardware and software line, including seven critical issues in Windows’ point-to-point tunneling protocol. October's security update features 11 critical...
Monkey365 - Tool For Security Consultants To Easily Conduct Not Only Microsoft 365, But Also Azure Subscriptions And Azure Active Directory Security Configuration Reviews
Monkey365 is an Open Source security tool that can be used to easily conduct not only Microsoft 365, but also Azure subscriptions and Azure Active Directory security configuration reviews without the significant overhead of learning tool APIs or complex admin panels from the start. To help with...
Windows Active Directory Certificate Services Security Feature Bypass
...
October 11, 2022—KB5018425 (OS Build 10240.19507) - EXPIRED
None None...
PT-2022-5785 · Microsoft · Active Directory Certificate Services +1
Name of the Vulnerable Software and Affected Versions: Active Directory Certificate Services affected versions not specified Description: The issue is related to insecure privilege management in Active Directory Certificate Services in Windows operating systems. It allows a remote attacker to...
CVE-2022-37976
CVE-2022-37976 is an Elevation of Privilege in Windows Active Directory Certificate Services (AD CS). A malicious DCOM client can force a AD CS server to authenticate to it over the network, potentially using those credentials to perform a cross-protocol attack. This could allow an attacker to ob...
CVE-2022-38042
CVE-2022-38042 is an Elevation of Privilege vulnerability in Active Directory Domain Services. The CVSS/description in the sources indicates network-access prerequisites with high impact (C/H, I/H, A/H) and a low-privilege, user-interaction-required path to obtain elevated rights in the AD DS con...
CVE-2022-37978
CVE-2022-37978 is a Windows Active Directory Certificate Services security feature bypass (Circumvention of security measure) with CVSS v3.1 base score 7.5. Affected component: Active Directory Certificate Services in Windows. Root cause details are not fully disclosed in the provided connected d...
CVE-2022-37976 Active Directory Certificate Services Elevation of Privilege Vulnerability
...
Microsoft Windows Active Directory Certificate Services 安全漏洞
Microsoft Windows Active Directory is a centralized directory management service from Microsoft Corporation USA that is responsible for architecting large network environments. Microsoft Windows Active Directory is vulnerable to a certificate service security feature bypass. No details of the...
CVE-2022-38042 Active Directory Domain Services Elevation of Privilege Vulnerability
...
PT-2022-5753 · Microsoft · Windows Active Directory Certificate Services +1
Name of the Vulnerable Software and Affected Versions: Windows Active Directory Certificate Services affected versions not specified Description: The issue is related to insufficient access restrictions in the Active Directory Certificate Services component of Windows operating systems. It allows...
PT-2022-5295 · Microsoft · Windows Active Directory Domain Services +1
Name of the Vulnerable Software and Affected Versions: Windows Active Directory Domain Services affected versions not specified Description: The issue is related to insufficient access restrictions in the Active Directory Domain Services of the Windows operating system. It allows a remote attacke...
CVE-2022-37978 Windows Active Directory Certificate Services Security Feature Bypass
...
KB5018446: Windows Server 2008 Security Update (October 2022)
The remote Windows host is missing security update 5018446. It is, therefore, affected by multiple vulnerabilities - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2022-38040 - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2022-37982,...