Windows Credential Guard KerbIumGetNtlmSupplementalCredential Information Disclosure

On Windows, the KerbIumGetNtlmSupplementalCredential CG API does not check the encryption key type leading to information disclosure of key material.

SHA-256 | bfc4de1d074e4d56008f260f7b9c997af5b2161990204d92efb3480c889c7baa

Download

Source: packetstormsecurity.com