CVE-2014-1812: Microsoft Windows Group Policy Preferences Password Privilege Escalation Vulnerability
The Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 does not properly handle distribution of passwords, which allows remote authenticated users to obtain sensitive credential information and consequently gain privileges by leveraging access to the SYSVOL share, as exploited in the wild in May 2014, aka "Group Policy Preferences Password Elevation of Privilege Vulnerability."
Other sources
Microsoft Windows Active Directory contains a privilege escalation vulnerability due to the way it distributes passwords that are configured using Group Policy preferences. An authenticated attacker who successfully exploits the vulnerability could decrypt the passwords and use them to elevate privileges on the domain.
— CISA
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1812?
CVE-2014-1812 is classified as a moderate severity vulnerability.
How do I fix CVE-2014-1812?
To remediate CVE-2014-1812, apply the appropriate security updates provided by Microsoft for the affected versions.
What systems are affected by CVE-2014-1812?
CVE-2014-1812 affects Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, Windows 8.1, and various versions of Windows Server.
Can CVE-2014-1812 be exploited remotely?
Yes, CVE-2014-1812 can be exploited by remote authenticated users.
What type of information can be compromised due to CVE-2014-1812?
CVE-2014-1812 can lead to unauthorized access to sensitive information as it improperly handles password distribution.