QwikSec

Security Database

CVE

CWE

Training

CVE-2017-11786

Published: Oct 13, 2017

Modified: Sep 16, 2024

PUBLISHED

Description

Skype for Business in Microsoft Lync 2013 SP1 and Skype for Business 2016 allows an attacker to steal an authentication hash that can be reused elsewhere, due to how Skype for Business handles authentication requests, aka "Skype for Business Elevation of Privilege Vulnerability."

Vendor	Product	Versions
Microsoft Corporation	Skype for Business	affected `Microsoft Lync 2013 SP1 and Skype for Business 2016`

References

vdb-entry

x_refsource_BID

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11786

x_refsource_CONFIRM

vdb-entry

x_refsource_SECTRACK

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.