Windows Credential Guard KerbIumGetNtlmSupplementalCredential Information Disclosure

On Windows, the KerbIumGetNtlmSupplementalCredential CG API does not check the encryption key type leading to information disclosure of key material.

Leave a Reply