Windows Credential Guard KerbIumCreateApReqAuthenticator Key Information Disclosure

On Windows, CG API KerbIumCreateApReqAuthenticator can be used to decrypt arbitrary encrypted Kerberos keys leading to information disclosure.

Leave a Reply