New Search

Windows Elevation of Privilege Vulnerability - CVE-2019-0734

oval:org.cisecurity:def:6355

An elevation of privilege vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully decode and replace authentication request using Kerberos allowing an attacker to be validated as an Administrator. The update addresses this vulnerability by changing how these requests are validated.

Family:
windows
Status:
ACCEPTED
Platform(s):
  • Microsoft Windows Server 2008 R2
  • Microsoft Windows Server 2012
  • Microsoft Windows Server 2008
  • Microsoft Windows 7
  • Microsoft Windows Server 2012 R2
  • Microsoft Windows 8.1
  • Microsoft Windows Server 2016
  • Microsoft Windows 10
  • Microsoft Windows Server 2019
Class:
vulnerability
Reference(s):
  • CVE-2019-0734
  • MSRC-CVE-2019-0734
  • KB4499175
  • KB4499180
  • KB4499158
  • KB4499165
  • KB4499154
  • KB4494440
  • KB4499181
  • KB4499179
  • KB4499167
  • KB4494441
  • KB4497936
Product(s):