Vulnerability

Windows password handling flaw

vulnerability:windows_password_handling_flaw Also: clear-text password caching in memory

The described weakness in which Windows login credentials may remain in clear text in memory.

Explore relationships

Mentioned in

Relationships

Direction Predicate Other entity Origin EP
incoming EXPLOITS Mimikatz Explicit 103

Claims

Mimikatz EXPLOITS Windows password handling flaw

Mimikatz extracts passwords from Windows memory where clear-text credentials may be cached.

Explicit Confidence 99% · Jack Rhysider EP 103 Details

“Windows has a major flaw in the way it handles passwords.”

Jack Rhysider · offsets 15421–15478

“Mimikatz is a tool that goes to the exact spot in memory and grabs the password”