| 标题 | Enter Software Iperius Backup <= 8.7.2 Authentication Bypass by Capture-replay |
|---|
| 描述 | The application is vulnerable to an NetNTLMv2 relay attack, allowing an attacker to capture and relay NetNTLMv2 authentication requests from a victim to another service, potentially enabling unauthorized authentication as the victim user. |
|---|
| 来源 | ⚠️ https://github.com/0truust/iperius-backup-security-advisories/blob/main/advisories/ntlm-relay-credential-exposure.md |
|---|
| 用户 | 0truust (UID 96115) |
|---|
| 提交 | 2026-03-06 20時09分 (7 月前) |
|---|
| 管理 | 2026-03-25 14時56分 (19 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 353123 [Enter Software Iperius Backup 直到 8.7.3 NTLM2 信息公开] |
|---|
| 积分 | 16 |
|---|