CVE-2017-11786

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 9.4%

probabilidade de exploração

9.4%top 5% das CVEs

exploração observada

nãonenhuma fonte reporta

Skype for Business in Microsoft Lync 2013 SP1 and Skype for Business 2016 allows an attacker to steal an authentication hash that can be reused elsewhere, due to how Skype for Business handles authentication requests, aka "Skype for Business Elevation of Privilege Vulnerability."

Produtos afetados

Microsoft Corporation · Skype for Business

Referências

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11786 http://www.securityfocus.com/bid/101156 http://www.securitytracker.com/id/1039530