Active Directory Domain Services Elevation of Privilege Vulnerability
Improper authentication in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network.
An elevation of privilege vulnerability exists in the way that the rpcss.dll handles objects in memory. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker could run a specially crafted application. The security update addresses the vulnerability by ensuring the rpcss.dll properly handles objects in memory.
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Dos herramientas gratuitas, una sola defensa: el Sensor detecta a quien sondea su servidor; Shield detiene a los atacantes conocidos antes de que lleguen a su sitio.
Instálelo y su cuota diaria de API sube a 30.000 consultas, sin solicitudes.