CVE-2020-15931
High
Description
Netwrix Account Lockout Examiner before 5.1 allows remote attackers to capture the Net-NTLMv1/v2 authentication challenge hash of the Domain Administrator (that is configured within the product in its installation state) by generating a single Kerberos Pre-Authentication Failed (ID 4771) event on a Domain Controller.
SeverityHigh
CVSS7.5
Exploit probability—
ProductNetwrix Account Lockout Examiner
PublishedOct 20, 2020
First seenOct 20, 2020
How to fix
Update
- netwrix account_lockout_examiner5.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netwrix account_lockout_examiner | v < 5.1 | 5.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.