download the new version for apple SQL Backup Master 6.3.628.0

The ShadowCoerce vulnerability can also be exploited to force NTLM relays to authenticate domain controllers, and hackers can even use MS-RPRN and MS-EFSRPC (PetitPotam) protocols for authentication to coerce remote servers.

Once the attacker receives elevated privileges, the attacker can impersonate any network device, including a Windows domain controller, as long as he relays (or forwards) the authentication request to Active Directory Certificates Services. In response to the silent patch, a Microsoft spokesperson confirmed that no public announcement had been made about the 'MS-FSRVP coercion abuse PoC aka ShadowCoerce' vulnerability which was mitigated with CVE-2022-30154, affected the same component, but Microsoft still does not provide any details about the ShadowCoerce vulnerability and no CVE-ID is assigned.Īccording to security researcher Lionel Gilles, who first discovered the ShadowCoerce vulnerability in late 2021, the flaw enables threat actors to coerce authentication through the MS-FSRVP protocol, which is an RPC protocol used on remote computers with File Server VSS Agent Service enabled. The NTLM relay attack technique can be used by threat actors to force unpatched Windows servers to authenticate against servers under their control, as a result, it enables to take control of Windows domains.

Microsoft, IT giant, has fixed a previously disclosed 'ShadowCoerce' vulnerability as a part of June 2022 updates, which can be exploited to target windows servers in NTLM relay attacks.

Download the new version for apple SQL Backup Master 6.3.628.0