NVD

Id
88136  
Name
CVE-2017-8495  
Description
Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to bypass Extended Protection for Authentication when Kerberos fails to prevent tampering with the SNAME field during ticket exchange, aka Kerberos SNAME Security Feature Bypass Vulnerability or Orpheus' Lyre.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2017-07-11  
Modified Date
2017-07-17  
Seq
2017-8495  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
422304 88136 CVE-2016-7840 JVN#60879379  View
422305 88136 CVE-2016-7840 95312  View
423663 88136 CVE-2017-6862 https://kb.netgear.com/000038542/Security-Advisory-for-Unauthenticated-Remote-Code-Execution-on-Some-Routers-PSV-2016-0261  View
423664 88136 CVE-2017-6862 https://kb.netgear.com/000038542/Security-Advisory-for-Unauthenticated-Remote-Code-Execution-on-Some-Routers-PSV-2016-0261  View

Related JVN