Description
Microsoft Windows Local Security Authority (LSA) contains a spoofing vulnerability where an attacker can coerce the domain controller to authenticate to the attacker using NTLM.
Recommended action
Apply remediation actions outlined in CISA guidance [https://www.cisa.gov/guidance-applying-june-microsoft-patch].
CISA remediation due date for U.S. federal agencies: 22 Jul 2022.
Collected automatically from public sources. Verify affected versions and fixes in the vendor's notice before acting.