IPS威胁百科

CVE-2021-42278

特征库ID：
51057
漏洞级别：
high
CVE ID：
CVE-2021-42278
建议的动作：
drop
受影响的系统：
Windows
协议：

攻击漏洞描述

这表明可能存在针对 Microsoft Active Directory 中的权限提升漏洞的攻击。该漏洞是由于对用户提供的输入的清理不足造成的。远程攻击者可能能够利用此漏洞通过精心设计的请求在应用程序上下文中执行任意代码。

影响范围

Windows Server 2008 R2 for x64-based Systems Service Pack 1 (Server Core installation) Windows Server 2008 R2 for x64-based Systems Service Pack 1 Windows Server 2008 for x64-based Systems Service Pack 2 (Server Core installation) Windows Server 2008 for x64-based Systems Service Pack 2 Windows Server 2008 for 32-bit Systems Service Pack 2 (Server Core installation) Windows Server 2008 for 32-bit Systems Service Pack 2 Windows Server 2012 R2 Windows Server 2012 (Server Core installation) Windows Server 2012 Windows Server 2016 (Server Core installation) Windows Server 2016 Windows Server 2019 (Server Core installation) Windows Server 2019 Windows Server 2022 (Server Core installation) Windows Server 2022 Windows Server, version 20H2 (Server Core Installation) Windows Server, version 2004 (Server Core installation)