Product:
Group Policy
Summary
The Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does not properly handle distribution of passwords. This vulnerability allows remote authenticated users to obtain sensitive credential information and gain privileges by leveraging access to the SYSVOL share.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2014-1812 |
Exploitation
To exploit this vulnerability, an attacker must have remote authenticated access to the affected systems. By leveraging this access, the attacker can obtain sensitive credential information from the SYSVOL share, which can then be used to escalate privileges within the system.
Affected Products
- Windows Vista SP2: Affected by improper password handling in Group Policy.
- Windows Server 2008 SP2: Vulnerable to credential information exposure.
- Windows 7 SP1: Allows remote authenticated users to gain privileges.
- Windows 8: Susceptible to exploitation through SYSVOL access.
- Windows 8.1: Affected by the same Group Policy vulnerability.
- Windows Server 2012 Gold: Vulnerable to credential exposure.
- Windows Server 2012 R2: Allows for privilege escalation through improper password distribution.
Mitigation
To mitigate this vulnerability, it is essential to apply updates as per the vendor’s instructions. Keeping systems updated will help protect against potential exploitation of this vulnerability.