CVE-2020-15931

ALTO 7.5CVE-2020-15931 · Published 20/10/2020 · updated 17/06/2026

In breve

CVE-2020-15931 è una vulnerabilità ALTO (CVSS 7.5) che riguarda account lockout examiner (netwrix).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 3.7%, superiore al 89.8% delle vulnerabilità.
Correzione: aggiornare a 5.1 o successiva.

Package	Affected versions	Patched versions
account lockout examiner netwrix	`< 5.1`	`5.1`

Description

Netwrix Account Lockout Examiner before 5.1 allows remote attackers to capture the Net-NTLMv1/v2 authentication challenge hash of the Domain Administrator (that is configured within the product in its installation state) by generating a single Kerberos Pre-Authentication Failed (ID 4771) event on a Domain Controller.

References

netwrix.com/netwrix_reports_vulnerability_in_netwrix_account_lockout_examiner_4_1.html · Vendor Advisory
optiv.com/explore-optiv-insights/source-zero/netwrix-account-lockout-examiner-41-disclosure-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free