CVE-2020-17049
Last modified
CVE-2020-17049 is a medium-severity vulnerability rated 6.6/10 on the CVSS scale. A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD). To exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service ticket that is not valid for delegation to force the KDC to accept it. The update addresses this vulnerability by changing how the KDC validates service tickets used with KCD.. EPSS estimates a 13.79% chance of exploitation in the next 30 days.
Description
A security feature bypass vulnerability exists in the way Key Distribution Center (KDC) determines if a service ticket can be used for delegation via Kerberos Constrained Delegation (KCD). To exploit the vulnerability, a compromised service that is configured to use KCD could tamper with a service ticket that is not valid for delegation to force the KDC to accept it. The update addresses this vulnerability by changing how the KDC validates service tickets used with KCD.
Metrics
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Windows Server 2012 | All versions |
| Microsoft | Windows Server 2012 | r2 |
| Microsoft | Windows Server 2016 | All versions |
| Microsoft | Windows Server 2016 | 20h2 |
| Microsoft | Windows Server 2016 | 1903 |
| Microsoft | Windows Server 2016 | 1909 |
| Microsoft | Windows Server 2016 | 2004 |
| Microsoft | Windows Server 2019 | All versions |
| Samba | Samba | >= 4.1.0, < 4.13.13 |
| Samba | Samba | >= 4.14.0, < 4.14.9 |
| Samba | Samba | >= 4.15.0, < 4.15.1 |
References
- http://www.openwall.com/lists/oss-security/2021/11/10/3Mailing List, Third Party Advisory
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17049Patch, Vendor Advisory
- http://www.openwall.com/lists/oss-security/2021/11/10/3Mailing List, Third Party Advisory
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-17049Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-17049?
How severe is CVE-2020-17049?
How do I fix CVE-2020-17049?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-17043Windows Remote Access Elevation of Privilege Vulnerability7.8
- CVE-2020-17044Windows Remote Access Elevation of Privilege Vulnerability7.8
- CVE-2020-17045Windows KernelStream Information Disclosure Vulnerability5.5
- CVE-2020-17046Windows Error Reporting Denial of Service Vulnerability5.5
- CVE-2020-17047Windows Network File System Denial of Service Vulnerability7.5
- CVE-2020-17048Chakra Scripting Engine Memory Corruption Vulnerability4.2
- CVE-2020-1705A vulnerability was found in openshift/template-service-brok…7
- CVE-2020-17051Windows Network File System Remote Code Execution Vulnerabil…9.8
- CVE-2020-17052Scripting Engine Memory Corruption Vulnerability7.5
- CVE-2020-17053Internet Explorer Memory Corruption Vulnerability7.5
- CVE-2020-17054Chakra Scripting Engine Memory Corruption Vulnerability4.2
- CVE-2020-17055Windows Remote Access Elevation of Privilege Vulnerability7.8
Are you affected by CVE-2020-17049?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST