CVE-2022-45141 | BDVDB-2026-196757 Detail

Description#

Since the Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability was disclosed by Microsoft on Nov 8 2022 and per RFC8429 it is assumed that rc4-hmac is weak, Vulnerable Samba Active Directory DCs will issue rc4-hmac encrypted tickets despite the target server supporting better encryption (eg aes256-cts-hmac-sha1-96).

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12023-03-06Record published in the CVE List.
2. Version 22025-03-06Most recent update recorded in the CVE List.