PT-2024-1031 · Microsoft · Windows Kerberos+1

Ldwilmore34 · Published 2024-01-09 · Updated 2024-06-11 · CVE-2024-20674

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Windows Kerberos (affected versions not specified)

Description The vulnerability is related to a security feature bypass in the Windows Kerberos implementation, allowing an authenticated attacker to establish a machine-in-the-middle (MITM) attack or use other local network spoofing techniques to send a malicious Kerberos message to the client victim machine, spoofing itself as the Kerberos authentication server. This could allow attackers to bypass authentication. The issue is estimated to be critical, with potential for significant impact.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-254

CWE-305

CWE-290

Related Identifiers

BDU:2024-00240

CVE-2024-20674

Affected Products

Windows

Windows Kerberos

References · 49

• https://bdu.fstec.ru/vul/2024-00240 · Security Note
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2024-20674 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-20674 · Security Note
• https://osv.dev/vulnerability/CVE-2024-20674 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-20674 · Security Note
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20674 · Vendor Advisory
• https://cybersecurity-help.cz/vdb/SB2024011001 · Note
• https://twitter.com/dansantanna/status/1745787244508807489 · Twitter Post
• https://twitter.com/rootsecdev/status/1744935467689070964 · Twitter Post
• https://twitter.com/tgorospe/status/1745824139389313495 · Twitter Post
• https://twitter.com/moton/status/1745076842191528300 · Twitter Post
• https://twitter.com/evanderburg/status/1744811935785521595 · Twitter Post
• https://twitter.com/csirtdf/status/1745105377945911338 · Twitter Post
• https://twitter.com/soheilsec/status/1745783596479062423 · Twitter Post
• https://twitter.com/PaulRusso627/status/1745078580587950136 · Twitter Post