Improper Authorization in Windows Server - CVE-2024-38129
Published: October 8, 2024
Vulnerability identifier: #VU98192
CSH Severity: Medium
CVSS v4: 7.7 [CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2024-38129
CWE-ID: CWE-285
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote user to escalate privileges on the system.
The vulnerability exists due to improper authorization in Windows Kerberos, which leads to security restrictions bypass and privilege escalation.
Affected software
Windows Server
How to mitigate CVE-2024-38129
Install updates from vendor's website.
Windows Server - update to 2022 23H2 10.0.25398.1189