CVE-2008-2246

Microsoft Windows Vista through SP1 and Server 2008 do not properly import the default IPsec policy from a Windows Server 2003 domain to a Windows Server 2008…

published August 13, 2008

CVSS

—

EPSS

32%

Percentile

98.3

In the wild

Unconfirmed

What it is

Microsoft Windows Vista through SP1 and Server 2008 do not properly import the default IPsec policy from a Windows Server 2003 domain to a Windows Server 2008 domain, which prevents IPsec rules from being enforced and allows remote attackers to bypass intended access restrictions.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.32064 · 98.3th percentile
Published: 2008-08-13T00:00Z

EPSS history

Timeline

13 AUG 00:00Z
Microsoft Windows Vista through SP1 and Server 2008 do not properly import the default IPsec policy from a Windows Server 2003 domain to a Windows Server 2008…
cvelistv5