It should be noted as a point on this specific bug that, since wasn't fixed in the EXTRA time allotted and subsequently disclosed, this is a good thing. Imperso

It should be noted as a point on this specific bug that, since wasn't fixed in the EXTRA time allotted and subsequently disclosed, this is a good thing. Impersonation is something that Windows Administrators can readily disable and manipulate via Group Policies and Active Directory. There's not a one-fix-for-all disable in this case, because impersonation is used in very nuanced ways. That being said, every organization can quickly and with a little effort tighten up their impersonation rights.