CVE-2024-20674
CVSS 3.1 Score 8.8 of 10 (high)
Details
Summary
CVE-2024-20674 represents a newly discovered security vulnerability affecting Windows Kerberos. This issue permits an attacker to bypass Kerberos security features, potentially gaining unauthorized access to a system or network. The precise method of exploitation involves manipulating certain authentication requests, which can lead to elevated privileges. The severity of this vulnerability is high, as it could enable an attacker to move laterally within a compromised network or escalate privileges on a target system. Microsoft is actively working on a patch to address this issue. In the meantime, administrators are advised to strengthen their security posture by implementing multi-factor authentication, limiting user privileges, and monitoring network traffic for suspicious activity.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions