Active Directory Domain Services Elevation of Privilege Vulnerability
Improper authentication in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.
An elevation of privilege vulnerability exists in the way that the wcmsvc.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application. The security update addresses the vulnerability by ensuring the wcmsvc.dll properly handles objects in memory.
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Zwei kostenlose Werkzeuge, eine Abwehr: Der Sensor erfasst, wer Ihren Server abtastet; Shield stoppt bekannte Angreifer, bevor sie Ihre Website erreichen.
Einmal installiert, steigt Ihr tägliches API-Kontingent auf 30.000 Abfragen — ohne Antrag.