CVE-2020-0665: Undefined Security Weakness

An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trusting forest request delegation of a TGT for an identity from the trusted forest, aka 'Active Directory Elevation of Privilege Vulnerability'...

CVE-2019-0683

Technical details about CVE-2019-0683 (affected component, root cause, impact, or fixes) are not provided in the connected documents. See references to broader Active Directory delegation changes and updates, but no CVE-specific technical data. Monitor for updates.

CVE-2019-0683: Incorrect Default Permissions

An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trusting forest request delegation of a TGT for an identity from the trusted forest, aka 'Active Directory Elevation of Privilege Vulnerability'...

Active Directory Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trusting forest request delegation of a TGT for an identity from the trusted forest. To exploit this vulnerability, an attacker would first need to compromise an...

Guidance to mitigate unconstrained delegation vulnerabilities

Executive Summary Active Directory Forest trusts provide a secure way for resources in a forest to trust identities from another forest. This trust is directional; a trusted forest can authenticate its users to the trusting forest without allowing the reverse. A feature, Enforcement for forest...