Active Directory Domain Services Elevation of Privilege Vulnerability
Improper authentication in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.
CISA hat am 15.03.2022 bestätigt, dass diese Schwachstelle in echten Angriffen genutzt wird. Frist für US-Bundesbehörden: 05.04.2022.
Erforderliche Maßnahme: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2019-1322
An elevation of privilege vulnerability exists when Windows improperly handles authentication requests, aka 'Microsoft Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1320, CVE-2019-1340.
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| Microsoft | Windows | 10 Version 1803 for 32-bit Systems, 10 Version 1803 for x64-based Systems, 10 Version 1803 for ARM64-based Systems, 10 Version 1809 for 32-bit Systems, 10 Version 1809 for x64-based Systems, 10 Version 1809 for ARM64-based Systems | |
| microsoft | windows 10 1803 | — | |
| microsoft | windows 10 1809 | — | |
| microsoft | windows 10 1903 | — | |
| Microsoft | Windows 10 Version 1903 for 32-bit Systems | unspecified | |
| Microsoft | Windows 10 Version 1903 for ARM64-based Systems | unspecified | |
| Microsoft | Windows 10 Version 1903 for x64-based Systems | unspecified | |
| Microsoft | Windows Server | version 1803 (Core Installation), 2019, 2019 (Core installation) | |
| microsoft | windows server 1803 | — | |
| microsoft | windows server 1903 | — | |
| microsoft | windows server 2019 | — | |
| Microsoft | Windows Server, version 1903 (Server Core installation) | unspecified |
cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:arm64:*cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:x64:*cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:x86:*cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:arm64:*cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x64:*cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:x86:*cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:arm64:*cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:x64:*cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:x86:*cpe:2.3:o:microsoft:windows_server_1803:-:*:*:*:*:*:x64:*cpe:2.3:o:microsoft:windows_server_1903:-:*:*:*:*:*:x64:*cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*Unser kostenloser Open-Source-Honeypot wartet auf Ports, die Ihr Server nicht nutzt, und meldet verbindende Scanner und Angreifer an eine gemeinsame Blockliste.