CVE-2014-1812—Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability

漏洞名称

Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability

描述

Microsoft Windows Active Directory contains a privilege escalation vulnerability due to the way it distributes passwords that are configured using Group Policy preferences. An authenticated attacker who successfully exploits the vulnerability could decrypt the passwords and use them to elevate privileges on the domain.

已知用于勒索软件活动吗？

勒索软件状态：

KNOWN

采集行动

Apply updates per vendor instructions.

其他说明

• https://nvd.nist.gov/vuln/detail/CVE-2014-1812

相关 CWE

• CWE-255