VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 12, 2019· Updated Aug 4, 2024

CVE-2019-1384

CVE-2019-1384

Description

A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages.To exploit this vulnerability, an attacker could send a specially crafted authentication request, aka 'Microsoft Windows Security Feature Bypass Vulnerability'.

Affected products

7
  • Microsoft/Windowsllm-fuzzy2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: 7 for 32-bit Systems Service Pack 1
  • Microsoft/Windows 10 Version 1903 for 32-bit Systemsv5
    Range: unspecified
  • Microsoft/Windows 10 Version 1903 for ARM64-based Systemsv5
    Range: unspecified
  • Microsoft/Windows 10 Version 1903 for x64-based Systemsv5
    Range: unspecified
  • Microsoft/Windows Server 2003cpe-rescue
    Range: 2008 R2 for x64-based Systems Service Pack 1 (Core installation)
  • Microsoft/Windows Server, version 1903 (Server Core installation)v5
    Range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.