ExploitsWindows LSA Service LsapGetClientInfo Impersonation Level Check Privilege Escalation

[1337day-Exploits]

On Microsoft Windows, the LsapGetClientInfo API in LSASRV will fallback and directly capture a caller's impersonation token if it fails to impersonate, leading to elevation of privilege if the impersonation level is not checked.

This is the hidden content, please

• Sign In
• or
• Sign Up