CVE-2017-8495
HighSummary
A vulnerability in Windows systems allows an attacker to bypass Extended Protection for Authentication when Kerberos fails to prevent tampering with the SNAME field during ticket exchange. This is known as 'Kerberos SNAME Security Feature Bypass'.
Risk Assessment
Organizations may be exposed to attacks that exploit this vulnerability to hijack authentication sessions, potentially leading to unauthorized access to resources.
Recommendation
It is recommended to update operating systems to the latest versions and apply relevant security patches provided by Microsoft.
Other vulnerabilities in Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1, Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, Windows Server 2016
See all- CVE-2017-8563High
A vulnerability in Microsoft Windows allows for elevation of privilege due to Kerberos falling back to NT LAN Manager (NTLM) Authentication Protocol as the default authentication protocol.
- CVE-2017-0294High
A vulnerability in Microsoft Windows allows an attacker to execute remote code when the system fails to properly handle cabinet files. This affects multiple versions of Windows, including Windows 7, 8.1, 10, and Windows Server.
Original NVD description (English source)
Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to bypass Extended Protection for Authentication when Kerberos fails to prevent tampering with the SNAME field during ticket exchange, aka "Kerberos SNAME Security Feature Bypass Vulnerability" or Orpheus' Lyre.