title: Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability
description: Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability
problem types: Elevation of Privilege
affected:
{
vendor: Microsoft
product: Windows Server 2019
platforms: x64-based Systems
versions:
version: N/A, status: affected
}
{
vendor: Microsoft
product: Windows Server 2019 (Server Core installation)
platforms: x64-based Systems
versions:
version: N/A, status: affected
}
{
vendor: Microsoft
product: Windows Server 2022
platforms: x64-based Systems
versions:
version: N/A, status: affected
}
{
vendor: Microsoft
product: Windows Server 2016
platforms: x64-based Systems
versions:
version: N/A, status: affected
}
{
vendor: Microsoft
product: Windows Server 2016 (Server Core installation)
platforms: x64-based Systems
versions:
version: N/A, status: affected
}
{
vendor: Microsoft
product: Windows Server 2008 Service Pack 2
platforms: 32-bit Systems
versions:
version: N/A, status: affected
}
{
vendor: Microsoft
product: Windows Server 2008 Service Pack 2 (Server Core installation)
platforms: [32-bit Systems, x64-based Systems]
versions:
version: N/A, status: affected
}
{
vendor: Microsoft
product: Windows Server 2008  Service Pack 2
platforms: x64-based Systems
versions:
version: N/A, status: affected
}
{
vendor: Microsoft
product: Windows Server 2008 R2 Service Pack 1
platforms: x64-based Systems
versions:
version: N/A, status: affected
}
{
vendor: Microsoft
product: Windows Server 2008 R2 Service Pack 1 (Server Core installation)
platforms: x64-based Systems
versions:
version: N/A, status: affected
}
{
vendor: Microsoft
product: Windows Server 2012
platforms: x64-based Systems
versions:
version: N/A, status: affected
}
{
vendor: Microsoft
product: Windows Server 2012 (Server Core installation)
platforms: x64-based Systems
versions:
version: N/A, status: affected
}
{
vendor: Microsoft
product: Windows Server 2012 R2
platforms: x64-based Systems
versions:
version: N/A, status: affected
}
{
vendor: Microsoft
product: Windows Server 2012 R2 (Server Core installation)
platforms: x64-based Systems
versions:
version: N/A, status: affected
}
metrics:
format: CVSS
scenarios: GENERAL
cvssV3_1: [
version: 3.1
baseSeverity: HIGH
baseScore: 8.1
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C
]