-
Notifications
You must be signed in to change notification settings - Fork 101
Open
Labels
Description
Some PAC types are missing (Ticket checksum, PAC Attributes and PAC Requestor), see https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-pac/3341cfa2-6ef5-42e0-b7bc-4544884bf399
Some of the PAC structures are important in terms of security. For example, the KDC can use the ticket checksum to verify if the ticket is modified (S4U2Self).
Relevent CVEs: CVE-2020-17049, CVE-2021-42287