Test ID:	1.3.6.1.4.1.25623.1.0.811923
Category:	Windows : Microsoft Bulletins
Title:	Microsoft Lync 2013 Service Pack 1 Elevation of Privilege Vulnerability (KB4011179)
Summary:	This host is missing an important security; update according to Microsoft KB4011179
Description:	Summary: This host is missing an important security update according to Microsoft KB4011179 Vulnerability Insight: The flaw exists due to error when Skype for Business fails to properly handle specific authentication requests. Vulnerability Impact: Successful exploitation will allow an attacker who successfully exploited this vulnerability to steal an authentication hash that can be reused elsewhere. The attacker could then take any action that the user had permissions for, causing possible outcomes that could vary between users. Affected Software/OS: - Microsoft Lync 2013 Service Pack 1 (32-bit) - Microsoft Lync 2013 Service Pack 1 (64-bit) Solution: The vendor has released updates. Please see the references for more information. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-11786 BugTraq ID: 101156 http://www.securityfocus.com/bid/101156 http://www.securitytracker.com/id/1039530
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.