CVE-2020-15931

https://notcve.org/view.php?id=CVE-2020-15931

20 Oct 2020 — Netwrix Account Lockout Examiner before 5.1 allows remote attackers to capture the Net-NTLMv1/v2 authentication challenge hash of the Domain Administrator (that is configured within the product in its installation state) by generating a single Kerberos Pre-Authentication Failed (ID 4771) event on a Domain Controller. Netwrix Account Lockout Examiner versiones anteriores a 5.1, permite a atacantes remotos capturar el hash de desafío de autenticación Net-NTLMv1/v2 del Administrador de Dominio (que está config... • https://github.com/optiv/CVE-2020-15931 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •