Remote Desktop Zero-Day Bug Allows Attackers to Hijack Sessions

guest · Jun 4, 2019

Remote Desktop Zero-Day Bug Allows Attackers to Hijack Sessions
June 4, 2019
https://www.bleepingcomputer.com/ne...-day-bug-allows-attackers-to-hijack-sessions/

A new zero-day vulnerability has been disclosed that could allow attackers to hijack existing Remote Desktop Services sessions in order to gain access to a computer.

The flaw can be exploited to bypass the lock screen of a Windows machine, even when two-factor authentication (2FA) mechanisms such as Duo Security MFA are used. Other login banners an organization may set up are also bypassed.
The issue is now tracked as CVE-2019-9510 and is described as an authentication bypass using an alternate path or channel.

An advisory today from the CERT Coordination Center at the Carnegie Mellon University Software Engineering Institute (SEI), warns that session locking can behave in an unexpected way on the latest Windows systems where remote desktop sessions use NLA.
Click to expand...

CERT/CC Advisory: Microsoft windows RDP Network Level Authenticaion can bypass the Windows lock screen

Vulnerability Note VU#576688
Original Release Date: 2019-06-04 | Last Revised: 2019-06-04
Overview
Microsoft Windows RDP Network Level Authentication can allow an attacker to bypass the lock screen on remote sessions.
Click to expand...

Log in or Sign up

Remote Desktop Zero-Day Bug Allows Attackers to Hijack Sessions

guest Guest

Log in or Sign up

Remote Desktop Zero-Day Bug Allows Attackers to Hijack Sessions

guest Guest

Useful Searches