CVE-2024-20674

Summary

CVE-2024-20674 represents a newly discovered security vulnerability affecting Windows Kerberos. This issue permits an attacker to bypass Kerberos security features, potentially gaining unauthorized access to a system or network. The precise method of exploitation involves manipulating certain authentication requests, which can lead to elevated privileges. The severity of this vulnerability is high, as it could enable an attacker to move laterally within a compromised network or escalate privileges on a target system. Microsoft is actively working on a patch to address this issue. In the meantime, administrators are advised to strengthen their security posture by implementing multi-factor authentication, limiting user privileges, and monitoring network traffic for suspicious activity.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.