itman 1,740 Posted March 26, 2018 Share Posted March 26, 2018 Quote Microsoft is getting tougher on clients that do not update their software, as it outlines in its latest advisory. The tech giant has created CredSSP updates for security vulnerability CVE-2018-0886, which was originally patched on March 13 2018. The CVE-2018-0886 security flaw is a remote code execution vulnerability that exists in the CredSSP. An attacker who successfully exploited this vulnerability could relay user credentials and use them to execute code on the target system. The patch released by Microsoft addresses the vulnerability by correcting how CredSSP validate requests during the authentication process. According to Microsoft’s latest advisory, the RDP update will enhance the error message that is presented when an updated client fails to connect to a server that has not been updated from April 17 2018. It recommends that administrators apply the policy and set it to “Force updated clients” or “Mitigated” on client and server computers as soon as possible. https://www.infosecurity-magazine.com/news/no-windows-rdp-update-no-connection/ Link to comment Share on other sites More sharing options...
Recommended Posts