CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2014-11-18
Microsoft Windows Kerberos KDC Signature Verification Bypass and Domain Privilege Escalation (CVE-2014-6324)
[Affected Scope] Active Directory Domain Controllers running Windows Server 2003, 2008, 2012, and associated Windows client operating systems
[Impact] A remote authenticated domain user can forge Kerberos ticket signatures (PAC) to escalate privileges to Domain Administrator, leading to a complete domain compromise
[Mitigation] Immediately apply the MS14-068 security update and perform a double reset of the krbtgt account password to invalidate existing forged tickets