Shulou(Shulou.com)11/24 Report--

CTOnews.com March 30, Microsoft released an emergency out-of-band update (OOB) in November last year, focusing on fixing vulnerabilities in Win10 / Win11 system Windows Kerberos.

After Phase 1 in November last year and Phase 2 in December last year, Microsoft announced that it would release a Phase 3 patch to fix this vulnerability during the Patch Tuesday event on April 11.

Kerberos authentication is a computer network security protocol used to verify service requests from two or more trusted hosts on an untrusted network, such as the Internet.

The Kerberos authentication problems encountered by Win10 and Win11 devices occurred after installing the cumulative updates released on Tuesday, November patch, resulting in domain user login failure, domain user remote desktop connection failure, and printing may require domain user authentication.

The official explanation of the CTOnews.com translation is as follows:

During Patch Tuesday, April 11, 2023, we will release a phase III patch for Kerberos to fix problems caused by the CVE-2022-37967 vulnerability in the IT environment.

Each phase increases the default minimum of CVE-2022-37967 security hardening changes to reduce the impact of this vulnerability on the environment.

After the update was released on April 11, the KrbtgtFullPacSignature subkey was set to 0 to disable the method of adding PAC signatures. The new update forces the value of the KrbtgtFullPacSignature subkey to be set to 1.

Related readings:

"Microsoft releases emergency out-of-band updates (OOB) to fix Kerberos authentication issues in Win10 / Win11"

"Microsoft acknowledges that the November update has led to Kerberos authentication problems on devices such as Win11 / Win10."

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.