Rapid7 Vulnerability & Exploit Database

Microsoft Windows: CVE-2020-0665: Active Directory Elevation of Privilege Vulnerability

Free InsightVM Trial No Credit Card Necessary
2024 Attack Intel Report Latest research by Rapid7 Labs
Back to Search

Microsoft Windows: CVE-2020-0665: Active Directory Elevation of Privilege Vulnerability

Severity
7
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Published
02/11/2020
Created
02/12/2020
Added
02/11/2020
Modified
06/10/2024

Description

An elevation of privilege vulnerability exists in Active Directory Forest trusts due to a default setting that lets an attacker in the trusting forest request delegation of a TGT for an identity from the trusted forest, aka 'Active Directory Elevation of Privilege Vulnerability'.

Solution(s)

  • microsoft-windows-windows_10-1507-kb4537776
  • microsoft-windows-windows_10-1607-kb4537764
  • microsoft-windows-windows_10-1709-kb4537789
  • microsoft-windows-windows_10-1803-kb4537762
  • microsoft-windows-windows_10-1809-kb4532691
  • microsoft-windows-windows_10-1903-kb4532693
  • microsoft-windows-windows_10-1909-kb4532693
  • msft-kb4532691-0e78339f-1546-434c-85f1-ec5617eb15b2
  • msft-kb4532693-a9b1a21b-4d78-4445-a122-0920a6bed52a
  • msft-kb4532693-bb723d9d-43f9-41c3-ac36-25a6146ee6e3
  • msft-kb4537762-d31c92db-ef15-475c-a50c-ee0f3b03888e
  • msft-kb4537764-652fa296-32a1-4c9f-b939-ed54f005703b
  • msft-kb4537794-568a5fd6-48c6-43f9-9ba0-2623e21003a0
  • msft-kb4537794-60748418-e339-4f4d-b2e9-afc7057a77ac
  • msft-kb4537794-8ae8ed3e-0077-405b-8f55-4f7c6a13238c
  • msft-kb4537803-14ae1eab-47ad-4f74-82ee-b2f75e6a258e
  • msft-kb4537803-abdc886d-fd3f-4006-9344-8497d4e85cbd
  • msft-kb4537803-dae0b2b7-0ee2-45e2-b59d-811480ec470e
  • msft-kb4537813-0f1f9882-3aa6-475a-b747-8de1ee20d2c6
  • msft-kb4537813-28d6394a-628c-4b44-8459-3ef74f1060b3
  • msft-kb4537813-99f4c6b4-59e7-494c-a789-7f7520726158
  • msft-kb4537813-a272e1e6-dfa1-4185-a6d1-df6be8d8e8e8
  • msft-kb4537813-da53c71d-c10b-4d52-bc6e-b47bf735d0d9
  • msft-kb4537822-4bdea811-188e-44d5-b156-6edcd91d3d71
  • msft-kb4537822-7eebe13a-a154-4538-be6c-46a00afb5860

References

View more

insightVM

Advanced vulnerability management analytics and reporting.
Key Features
Free InsightVM Trial View All Features

With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.

– Scott Cheney, Manager of Information Security, Sierra View Medical Center

;