2022
07.16

On Microsoft Windows, the LsapGetClientInfo API in LSASRV will fallback and directly capture a caller’s impersonation token if it fails to impersonate, leading to elevation of privilege if the impersonation level is not checked.

No Comment.

Add Your Comment

You must be logged in to post a comment.