CVE-2024-45204

Summary

CVE-2024-45204 is a newly disclosed vulnerability that allows a low-privileged user to illicitly obtain NTLM hashes of saved credentials through insufficient permissions in credential handling. By exploiting this weakness, attackers can potentially gain access to sensitive information and impersonate other users, leading to broader security risks beyond the initial targeted system. The vulnerability may have serious implications for organizations that rely on NTLM authentication and could necessitate immediate remediation efforts.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.