NTLM Hash Disclosure Spoofing Vulnerability

An attacker can trick Windows NTLM authentication into using a file path they control, allowing them to impersonate legitimate users or systems on a network without proper authorization.

CWE-73 (external control of file name or path) in Windows NTLM enables network-based spoofing attacks where an attacker manipulates file path parameters to redirect authentication attempts. The vulnerability requires network access but no authentication pre-conditions, resulting in identity spoofing with medium severity (CVSS 6.5).