Skip to content
Patch Next
Sign inAdd to your agent

← Public intelligence

NuGet package

dsinternals.common

Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.

Open advisories

1 actionable advisory, newest first. Withdrawn advisories and news are excluded. Coverage is partial.

  1. Medium, CVSS 6.3NuGetPublished

    DSInternals Credential Roaming Elevation of Privilege Vulnerability

    GHSA-vx2x-9cff-fhjw

    Affected
    • NuGet dsinternals.common >= 2.21, < 4.8
    Fixed in
    4.8· Vendor fix available
    Issue
    Impact A vulnerability exists in the DSInternals.Common.Data.RoamedCredential.Save() method, which incorrectly parses the msPKIAccountCredentials LDAP attribute values. As a consequence, a malicious actor would be able to modify the file system of the computer where an application using this function is executed with administrative privileges. A similar security issue used to be present in the Windows operating system, as DSInternals re-implements the Credential Roaming feature of Windows. Exploitability The vulnerability can be exploited under the following circumstances: - An attacker is able to modify the msPKIAccountCredentials attribute of a user account in Active Directory. This attribute is used by the Credential Roaming feature of Windows and each AD user can modify their own roamed credentials. AND - A 3rd party application uses the DSInternals.Common library to export roamed credentials from Active Directory to a file system. AND - The application has administrative…

    Recommended action: Upgrade to 4.8 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

    Sources:github.comSource checked Evidence →