---
id: 6068
title: "[CVE-2014-6324] Vulnerability in Kerberos Allows Elevation of Privilege"
cve: CVE-2014-6324
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/vulnerability-kerberos-allows-elevation-privilege/"
published_at: "2014-11-19T19:16:23Z"
tags: ["active-directory", "privilege-escalation", "kerberos", "windows-server", "vulnerability", "cve-2014-6324", "ms14-068"]
phying_url: "https://phying.com/item/6068"
lang: en
---

# [CVE-2014-6324] Vulnerability in Kerberos Allows Elevation of Privilege

## Summary

CVE-2014-6324 (MS14-068): any authenticated domain user could forge a Kerberos ticket with a tampered PAC to reach Domain Admin—a critical Windows KDC flaw, fixed by correcting signature verification.

## Intelligence Metadata

- **Sources:** semperis.com
- **CVE:** CVE-2014-6324
- **Published:** 2014-11-19T19:16:23Z
- **Original:** https://www.semperis.com/blog/vulnerability-kerberos-allows-elevation-privilege/
- **Phying News:** https://phying.com/item/6068