IT

Tracker / CVE-2019-1384

CVE-2019-1384

Critical 9.9

A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages.To exploit this vulnerability, an attacker could send a specially crafted authentication request, aka 'Microsoft Windows Security Feature Bypass Vulnerability'.

Affected products and versions

microsoft windows_10
microsoft windows_7
microsoft windows_8.1
microsoft windows_rt_8.1
microsoft windows_server_2008
microsoft windows_server_2012
microsoft windows_server_2016
microsoft windows_server_2019

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References