Remove Authentication Remove Azure Remove Examples Remove LAN
article thumbnail

Microsoft’s August 2023 Patch Tuesday Addresses 73 CVEs (CVE-2023-38180)

Tenable

According to the advisories, exploitation of these vulnerabilities would allow an authenticated attacker to execute code using a PowerShell remoting session. In order to successfully exploit this flaw, the attacker would first need to have LAN access and valid credentials for an Exchange user. These were omitted from our totals.

Windows 98
article thumbnail

Microsoft’s January 2023 Patch Tuesday Addresses 98 CVEs (CVE-2023-21674)

Tenable

Azure Service Fabric Container. Windows Authentication Methods. and could grant an authenticated attacker SYSTEM privileges. Successful exploitation could lead to disclosure of New Technology LAN Manager (NTLM) hashes and NTLM relay attacks. This month’s update includes patches for: NET Core. 3D Builder. Windows ALPC.

Windows 99
Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Microsoft’s August 2021 Patch Tuesday Addresses 44 CVEs (CVE-2021-26424, CVE-2021-36948)

Tenable

Azure Sphere. Microsoft Azure Active Directory Connect. CVE-2021-36942 is a spoofing vulnerability in Windows Local Security Authority (LSA) which could allow an unauthenticated attacker using New Technology LAN Manager (NTLM) to trick a domain controller into authenticating with another server. Microsoft Dynamics.

Windows 100
article thumbnail

Ivanti Product Update - October 2022

Ivanti

Bandwidth utilization in the Agent Policy manages network performance by allowing users to set the percentage of WAN/LAN bandwidth to be used when downloading patch content packages from Ivanti Neurons. For example, a grace period can be assigned with additional countdown and snooze options. iOS/iPadOS 16/macOS 13. Ivanti EPMM 11.8.