NTLM Hash Disclosure Spoofing Vulnerability

A vulnerability allows attackers to trick systems into revealing NTLM password hashes through spoofing attacks. These hashes could potentially be used in offline cracking attempts to compromise user accounts.

CWE-73 weakness enables NTLM hash disclosure via spoofing vectors where attackers manipulate authentication protocols to extract credential hashes. Exploitation requires network access and can lead to unauthorized authentication or offline hash cracking, with moderate impact on confidentiality.