writeups.xyz / CVE-2022-30216 - Authentication coercion of the Windows “Server” service

Submitter : c2a

Date: 13 August 2022

Bounty : undisclosed

Vulnerabilities :

• Off-by-One Error
• Authentication Coercion

Programs :

• Microsoft

Authors :

• Ben Barnea (@Nachoskrnl)

Link :
https://www.akamai.com/blog/security/authentication-coercion-windows-server-service