← CVE Intelligence

CVE-2019-1338

Microsoft / Windows PUBLISHED

Description (CNA)

A security feature bypass vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully bypass the NTLMv2 protection if a client is also sending LMv2 responses, aka 'Windows NTLM Security Feature Bypass Vulnerability'.

Affected (CNA)

Vendor / productVersions
Microsoft / Windowsaffected 7 for 32-bit Systems Service Pack 1; affected 7 for x64-based Systems Service Pack 1
Microsoft / Windows Serveraffected 2008 R2 for x64-based Systems Service Pack 1 (Core installation); affected 2008 R2 for Itanium-Based Systems Service Pack 1; affected 2008 R2 for x64-based Systems Service Pack 1; affected 2008 for 32-bit Systems Service Pack 2 (Core installation); affected 2008 for Itanium-Based Systems Service Pack 2; affected 2008 for 32-bit Systems Service Pack 2; affected 2008 for x64-based Systems Service Pack 2; affected 2008 for x64-based Systems Service Pack 2 (Core installation)

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.