4419 matches found
CVE-2021-42287 Active Directory Domain Services Elevation of Privilege Vulnerability
...
CVE-2021-42287 Active Directory Domain Services Elevation of Privilege Vulnerability
...
CVE-2021-42287
CVE-2021-42287 is an Active Directory Domain Services privilege-escalation vulnerability. Connected documents corroborate it as part of a vulnerability family targeting domain controllers (CVE-2021-42278/42287) and describe exploitation via impersonation from a standard domain user to a DA, inclu...
CVE-2021-42282
Technical details for CVE-2021-42282 are not publicly provided in the connected documents. No specifics on affected product versions, root cause, or remediation are present. Monitor for updates.
CVE-2021-42282 Active Directory Domain Services Elevation of Privilege Vulnerability
...
CVE-2021-42278 Active Directory Domain Services Elevation of Privilege Vulnerability
...
CVE-2021-42278 Active Directory Domain Services Elevation of Privilege Vulnerability
...
CVE-2021-42278
CVE-2021-42278 is an Active Directory Domain Services privilege-escalation vulnerability in Microsoft Windows. The connected documents describe exploits/frameworks (e.g., Pachine, sam-the-admin, noPac) that impersonate a Domain Administrator from a standard domain user using Kerberos delegation t...
Microsoft Windows Multiple Vulnerabilities (KB5007247)
This host is missing a critical security update according to Microsoft KB5007247 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-42278
Active Directory Domain Services Elevation of Privilege Vulnerability Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
Microsoft is a 5-time Leader in the Gartner Magic Quadrant for Access Management
We are honored that Gartner recognized Microsoft as a Leader in Gartner® Magic QuadrantTM for Access Management in Microsoft Azure Active Directory Azure AD. In addition, Microsoft has placed the farthest right on the “Completeness of Vision” axis. None of this is possible without you, our...
Active Directory Domain Services Elevation of Privilege Vulnerability
...
Samba 竞争条件问题漏洞
Samba is the standard Windows interoperability suite for Linux and Unix. A security vulnerability exists in Samba that stems from a flaw discovered in the way Samba, which acts as an Active Directory domain controller, implements Kerberos name-based authentication. An attacker could exploit this...
Microsoft Windows Active Directory 权限许可和访问控制问题漏洞
Microsoft Windows Active Directory is a centralized directory management service responsible for architecting medium- to large-scale network environments from the U.S. company Microsoft. Stores information about objects on the network and makes it easy for administrators and users to find and use...
Samba 权限许可和访问控制问题漏洞
Samba is the standard Windows interoperability suite for Linux and Unix. Samba suffers from a permission permission and access control issue vulnerability that stems from multiple flaws found in the way samba AD DC implements access and consistency checks for stored data. An attacker could exploi...
A user in an AD Domain could become root on
Description Windows Active Directory AD domains have by default a feature to allow users to create computer accounts, controlled by ms-DS-MachineAccountQuota. In addition some presumably trusted users have the right to create new users or computers in both Samba and Windows Active Directory...
Samba AD DC did not correctly sandbox
Description Samba as an Active Directory Domain Controller is able to support an RODC, which is meant to have minimal privileges in a domain. However, in accepting a ticket from a Samba or Windows RODC, Samba was not confirming that the RODC is authorized to print such a ticket, via the...
UBUNTU-CVE-2020-25721
Kerberos acceptors need easy access to stable AD identifiers eg objectSid. Samba as an AD DC now provides a way for Linux applications to obtain a reliable SID and samAccountName in issued tickets...
PT-2021-4805
Name of the Vulnerable Software and Affected Versions Microsoft Windows Server versions prior to the fixed version Microsoft Active Directory Domain Services affected versions not specified Description The issue is related to insecure privilege management in Active Directory Domain Services,...
PT-2021-5301 · Microsoft · Active Directory Domain Services +1
Name of the Vulnerable Software and Affected Versions: Active Directory Domain Services affected versions not specified Description: The issue is related to insufficient access control in Active Directory Domain Services, which can be exploited by a remote attacker to elevate their privileges...