Security features bypass in Microsoft Windows and Windows Server - CVE-2022-26913

Vulnerability identifier: #VU62989

CSH Severity: Medium

CVSS v4: 9.1 [CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2022-26913

CWE-ID: CWE-254

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to bypass authentication process.

The vulnerability exists due to security feature bypass issue in Windows Authentication. A remote attacker can bypass the target application

Microsoft Windows
Windows Server
Solutions Enabler
Unisphere 360
Unisphere for PowerMax
Unisphere for PowerMax Virtual Appliance
eVASA Provider Virtual Appliance
VASA Provider Standalone
Solutions Enabler Virtual Appliance

Install updates from vendor's website.

Solutions Enabler - update to 9.2.3.5
Solutions Enabler Virtual Appliance - update to 9.2.3.5
Unisphere 360 - update to 9.2.3.8
Unisphere for PowerMax - update to 9.2.3.20
Unisphere for PowerMax Virtual Appliance - update to 9.2.3.20
eVASA Provider Virtual Appliance - update to 9.2.4.11
VASA Provider Standalone - update to 9.2.4.21

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2022-26913

• Security features bypass in Microsoft Windows Authentication
• Multiple vulnerabilities in Dell products