CVE-2023-29446

Summary

CVE-2023-29446 is a newly identified input validation vulnerability. Malicious project files containing UNC paths can be injected, leading to NLTMv2 hash capture. An adversary can exploit this weakness to crack these hashes offline, potentially gaining unauthorized access to sensitive data. This vulnerability underscores the importance of validating and sanitizing user inputs to prevent such attacks.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.