3 ms·
These servers are not at all publicly facing. Hence, being vulnerable doesn't lead to immediate compromise. An attacker would need to do initial intrusion firs
by rocqua 6y ago
These servers are not at all publicly facing. Hence, being vulnerable doesn't lead to immediate compromise.
An attacker would need to do initial intrusion first, and then discover the vulnerable server. This means there is a lot less pressure on getting these things patched immediately
- freehunter 6y ago> These servers are not at all publicly facing That’s a bold (and incorrect) statement. What you meant to say is “hopefully (and in most but not all cases) these servers are not publicly facing”. Because I’ve worked with an alarmingly high number of organizations where their internal AD absolutely is public facing.