Both security issues aren't documented in detail. The security advisories talk about 'Windows Kerberos RC4-HMAC Elevation of Privilege Vulnerability' and a generic 'Windows Kerberos Elevation of Privilege Vulnerability,' correspondingly. From the accompanying knowledge base articles we can see that these vulnerabilities affect use of the standard RC4-HMAC encryption type in the Active Directory Kerberos implementation. It has been known for some time that RC4-HMAC is an encryption type that might be broken, and a recommendation has been to disable RC4-HMAC use in Active Directory environment, enforced via various STIG and CIS profiles for Windows systems.

Read More ...