CVE-2022-37978

CVE-2022-37978 is a Windows Active Directory Certificate Services security feature bypass (Circumvention of security measure) with CVSS v3.1 base score 7.5. Affected component: Active Directory Certificate Services in Windows. Root cause details are not fully disclosed in the provided connected d...

Microsoft Windows Active Directory security vulnerabilities

Microsoft Windows Active Directory is a centralized directory management service from Microsoft Corporation USA that is responsible for architecting large network environments. Microsoft Windows Active Directory has a domain name service elevation of privilege vulnerability, which stems from...

CVE-2022-38042 Active Directory Domain Services Elevation of Privilege Vulnerability

...

PT-2022-5753 · Microsoft · Windows Active Directory Certificate Services +1

Name of the Vulnerable Software and Affected Versions: Windows Active Directory Certificate Services affected versions not specified Description: The issue is related to insufficient access restrictions in the Active Directory Certificate Services component of Windows operating systems. It allows...

CVE-2022-37976

CVE-2022-37976 is an Elevation of Privilege in Windows Active Directory Certificate Services (AD CS). A malicious DCOM client can force a AD CS server to authenticate to it over the network, potentially using those credentials to perform a cross-protocol attack. This could allow an attacker to ob...

CVE-2022-38042

CVE-2022-38042 is an Elevation of Privilege vulnerability in Active Directory Domain Services. The CVSS/description in the sources indicates network-access prerequisites with high impact (C/H, I/H, A/H) and a low-privilege, user-interaction-required path to obtain elevated rights in the AD DS con...

KB5018446: Windows Server 2008 Security Update (October 2022)

The remote Windows host is missing security update 5018446. It is, therefore, affected by multiple vulnerabilities - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2022-38040 - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2022-37982,...

KB5018479: Windows 7 / Windows Server 2008 R2 Security Update (October 2022)

The remote Windows host is missing security update 5018479. It is, therefore, affected by multiple vulnerabilities - Microsoft ODBC Driver Remote Code Execution Vulnerability CVE-2022-38040 - Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability CVE-2022-37982,...

Code injection

On Metasys ADX Server version 12.0 running MVE, an Active Directory user could execute validated actions without providing a valid password when using MVE SMP UI...

CVE-2022-21936

CVE-2022-21936 affects Johnson Controls Metasys ADX Server version 12.0 running MVE. The vulnerability is improper authentication, enabling an Active Directory user to execute validated actions without a valid password via the MVE SMP UI. Public impact details indicate remote exploitation with lo...

CVE-2022-21936 Metasys MVE

On Metasys ADX Server version 12.0 running MVE, an Active Directory user could execute validated actions without providing a valid password when using MVE SMP UI...

CVE-2022-21936: Improper Authentication

On Metasys ADX Server version 12.0 running MVE, an Active Directory user could execute validated actions without providing a valid password when using MVE SMP UI...

PT-2022-15192 · Johnson Controls · Metasys Adx Server

Name of the Vulnerable Software and Affected Versions: Metasys ADX Server version 12.0 Description: The issue allows an Active Directory user to execute validated actions without providing a valid password when using MVE SMP UI. Recommendations: For Metasys ADX Server version 12.0, consider...

Unable to detect AD forest while creating machine catalog in Citrix DaaS

Unable to detect AD Forests with two domains abc.loc and xyz.loc in the Citrix Cloud environment while creating a machine catalog with below error - ErrorDetails":"Error Id: XDAPI:6E90CBED\r\n\r\nException:\r\nDesktopStudioErrorId : ExceptionThrown\r\nException : System.InvalidOperationException:...

CVE-2022-21936

On Metasys ADX Server version 12.0 running MVE, an Active Directory user could execute validated actions without providing a valid password when using MVE SMP UI...

Johnson Controls Metasys ADX Server

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: Johnson Controls Inc. Equipment: Metasys ADX Extended Application and Data Server Server running MVE Metasys for Validated Environments Vulnerability: Improper Authentication 2. RISK EVALUATION...

State-Sponsored Hackers Likely Exploited MS Exchange 0-Days Against ~10 Organizations

Microsoft on Friday disclosed that a single activity group in August 2022 achieved initial access and breached Exchange servers by chaining the two newly disclosed zero-day flaws in a limited set of attacks aimed at less than 10 organizations globally. "These attacks installed the Chopper web she...

Analyzing attacks using the Exchange vulnerabilities CVE-2022-41040 and CVE-2022-41082

October 1, 2022 update – Added information about Exploit:Script/ExchgProxyRequest.A, Microsoft Defender AV’s robust detection for exploit behavior related to this threat. We also removed a section on MFA as a mitigation, which was included in a prior version of this blog as standard guidance...

Analyzing attacks using the Exchange vulnerabilities CVE-2022-41040 and CVE-2022-41082

October 1, 2022 update – Added information about Exploit:Script/ExchgProxyRequest.A, Microsoft Defender AV’s robust detection for exploit behavior related to this threat. We also removed a section on MFA as a mitigation, which was included in a prior version of this blog as standard guidance...

Microsoft Windows Active Directory Certificate Services Improper Authorization Privilege Escalation Vulnerability

This vulnerability allows network-adjacent attackers to escalate privileges on affected installations of Microsoft Windows Active Directory Certificate Services. Authentication is required to exploit this vulnerability. The specific flaw exists within the issuance of certificates. By including...