High · published November 10, 2021
CVSS calls it high at 7.5. It is confirmed in active exploitation. It sits in the 99.6th percentile for exploit probability.
🚨 A cunning elevation of privilege vulnerability in Active Directory is leaving doors wide open for attackers! 🔥 Think of this like a security guard at a VIP club who mistakenly lets in someone without checking their credentials—once inside, the intruder can access the back room and wreak havoc. 🏰 An attacker can exploit this flaw to elevate their privileges, gaining unauthorized access to sensitive resources and potentially compromising the entire domain. Imagine someone slipping through the cracks and having free rein to change configurations, steal data, or even lock you out of your own system—absolutely devastating!
Think of this like a security guard at a VIP club who mistakenly lets in someone without checking their credentials—once inside, the intruder can access the back room and wreak havoc. 🏰 This vulnerability allows attackers to gain elevated privileges by exploiting improper validation within the Active Directory Domain Services, enabling them to bypass security controls and gain access to restricted data or functionalities.
An attacker can exploit this flaw to elevate their privileges, gaining unauthorized access to sensitive resources and potentially compromising the entire domain. Imagine someone slipping through the cracks and having free rein to change configurations, steal data, or even lock you out of your own system—absolutely devastating! Immediate action is crucial! Update your systems to the latest version of Active Directory to patch this vulnerability. Conduct a full review of user permissions and ensure that only the necessary users have elevated access rights. 🛡️ You've got this! By actively addressing this vulnerability, you can safeguard your network and keep those intruders at bay! 💪✨
| Product | Versions | Fixed in |
|---|---|---|
| microsoft/windows_server_2004 | < 10.0.19041.1348 | 10.0.19041.1348 |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2008 | all versions | — |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2012 | all versions | — |
| microsoft/windows_server_2016 | < 10.0.14393.4770 | 10.0.14393.4770 |
| microsoft/windows_server_2019 | < 10.0.17763.2300 | 10.0.17763.2300 |
| microsoft/windows_server_2022 | < 10.0.20348.350 | 10.0.20348.350 |
| microsoft/windows_server_20h2 | < 10.0.19042.1348 | 10.0.19042.1348 |