FILE Windows MSHTML Platform Elevation of Privilege Vulnerability (CVE-2023-32046)

Rule ID

1233205

Severity

High

Description

NTLM relay issue has been identified using IE's shortcutlinks. This vulnerability can lead to NTLM cred leaks, leading to EOP.

Impact

Privilege escalation

Recommendation

Update vendor's patch.

IPS Category

Exploits

IPS Anomaly Group

N/A

IPS Rule Default Action

Deny

References

Keywords

Windows Server 2008, Windows Server 2012, Windows Server 2016, Windows Server 2019