CVE-2019-1019— Microsoft Windows Security Feature Bypass Vulnerability

Microsoft Windows Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages. To exploit this vulnerability, an attacker could send a specially crafted authentication request. An attacker who successfully exploited this vulnerability could access another machine using the original user privileges. The issue has been addressed by changing how NTLM validates network authentication messages.

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

N/A

Microsoft Windows 信息泄露漏洞

Microsoft Windows是美国微软（Microsoft）公司的一套个人设备使用的操作系统。 Microsoft Windows中存在信息泄露漏洞。攻击者可借助特制的身份验证请求利用该漏洞绕过安全限制。以下产品及版本受到影响：Microsoft Windows 10，Windows 10版本1607，Windows 10版本1703，Windows 10版本1709，Windows 10版本1803，Windows 10版本1809，Windows 10版本1903，Windows 7 SP1，W

N/A

N/A