Microsoft Windows Elevation Of Privilege Vulnerability

Dear users,

As you may all be already aware that there is an elevation of privilege vulnerability exists in Microsoft Windows that could allow a man-in-the-middle attacker to successfully forward an authentication request to a Windows LDAP server, such as a system running AD DS or AD LDS, which has not configured to require signing or sealing on incoming connections.

More information can be referred from the below article.

https://support.microsoft.com/en-ae/help/4520412/2020-ldap-channel-binding-and-ldap-signing-requirements-for-windows

Lately, we have been receiving quite a few requests to move from AD to LDAPS citing this vulnerability. We would strongly suggest you stay with AD as AD import, Users Sync. and Authentication are not impacted by this vulnerability.

We would also recommend you to take the recommended actions in the same article.

Should you need any further information, please write to support@servicedeskplus.com, we would be happy to assist you.

Cheers..!