CVE-2020-15931

Netwrix Account Lockout Examiner prior to 5.1 is affected. The issue enables remote attackers to capture the Domain Administrator’s Net-NTLMv1/v2 challenge hashes by eliciting a single Kerberos Pre-Authentication Failed (Event ID 4771) on a Domain Controller. Affected component is the Netwrix ALE...