CVE-2022-26913

Windows Authentication Information Disclosure Vulnerability...

Information disclosure

Windows Authentication Information Disclosure Vulnerability...

CVE-2022-26913 Windows Authentication Information Disclosure Vulnerability

...

Microsoft Windows Authentication Methods 安全特征问题漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security signature issue vulnerability exists in Microsoft Windows Authentication Methods. The following products and editions are affected: Windows 10 Version 1909 for 32-bit...

CVE-2022-26913: Undefined Security Weakness

Windows Authentication Information Disclosure Vulnerability...

CVE-2022-27181

On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, when APM is configured on a virtual server and the associated access profile is configured with APM AAA...

CVE-2022-27181

On F5 BIG-IP APM 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all versions of 12.1.x and 11.6.x, when APM is configured on a virtual server and the associated access profile is configured with APM AAA...

The vulnerability of the IWA (Integrated Windows Authentication) mechanism in software for managing virtual infrastructure such as VMware vCenter Server and VMware Cloud Foundation allows a perpetrator to escalate their privileges.

The vulnerability of the IWA Integrated Windows Authentication implementation in VMware vCenter Server and VMware Cloud Foundation software relates to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

Vulnerability fixed in VMware vCenter and Cloud Foundation

VMware has fixed a vulnerability in vCenter Server and Cloud Foundation. An authenticated malicious party could, by exploiting this vulnerability obtain elevated privileges on the vulnerable system. The vulnerability is located in the Integrated Windows Authentication IWA authentication mechanism...

CVE-2021-22048

The vCenter Server contains a privilege escalation vulnerability in the IWA Integrated Windows Authentication authentication mechanism. A malicious actor with non-administrative access to vCenter Server may exploit this issue to elevate privileges to a higher privileged group...

CVE-2021-22048

The vCenter Server contains a privilege escalation vulnerability in the IWA Integrated Windows Authentication authentication mechanism. A malicious actor with non-administrative access to vCenter Server may exploit this issue to elevate privileges to a higher privileged group...

VMware vCenter Server updates address a privilege escalation vulnerability (CVE-2021-22048)

3. VMware vCenter Server IWA privilege escalation vulnerability CVE-2021-22048 The vCenter Server contains a privilege escalation vulnerability in the IWA Integrated Windows Authentication authentication mechanism. VMware has evaluated the severity of this issue to be in the Important severity...

PT-2021-4966

Name of the Vulnerable Software and Affected Versions VMware vCenter Server versions affected versions not specified VMware Cloud Foundation versions affected versions not specified Description The issue is related to a privilege escalation vulnerability in the IWA Integrated Windows Authenticati...

July 13, 2021—KB5004299 (Security-only update)

None None...

July 13, 2021—KB5004307 (Security-only update)

None None...

July 13, 2021 Public preview security update (KB5004243)

None None...

June 8, 2021 Public preview security update (KB5003645)

None None...

The vulnerability of the PKU2U authentication protocol for Windows operating systems allows attackers to escalate their privileges.

The vulnerability of the PKU2U authentication protocol for Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

October 13, 2020—KB4580327 (OS Build 10240.18725) - EXPIRED

None None...

PT-2020-14630 · Siemens · Siveillance Video Client

Name of the Vulnerable Software and Affected Versions: Siveillance Video Client All versions Description: A vulnerability has been identified where the client application transmits usernames to the server in cleartext when Windows NTLM authentication is enabled. This could allow an attacker in a...