← back | CVE Intelligence

CVE-2020-17049

Curated 3 security research writeups, vulnerability advisories and exploitation analyses for CVE-2020-17049.

Coverage Span: 2020-12-08
Reports: 3 related reports

Associated Reports & Timeline

CVE-2020-17049: Kerberos Bronze Bit Attack – Practical Exploitation

Practical exploitation of Bronze Bit (CVE-2020-17049): attackers with a service account hash can bypass Protected Users and TrustedToAuthForDelegation restrictions to abuse Kerberos delegation paths.

CVE-2020-17049: Kerberos Bronze Bit Attack – Overview

Overview of the Bronze Bit attack (CVE-2020-17049), which abuses Kerberos constrained delegation by flipping the forwardable flag on service tickets to impersonate users marked as sensitive.

CVE-2020-17049: Kerberos Bronze Bit Attack – Theory

Theory behind the Kerberos Bronze Bit attack (CVE-2020-17049), which abuses a KDC flaw to bypass delegation checks in resource-based constrained delegation attacks against Active Directory.