Exploit released for Microsoft bug allowing attacker to masquerade as legitimate entity

Researchers from Akamai have released a proof-of-concept for a vulnerability affecting a Microsoft tool that allows the Windows’ application programming interface to deal with cryptography. 

The vulnerability, CVE-2022-34689, was discovered by the United Kingdom’s National Cyber Security Centre and the National Security Agency. It affects a tool called CryptoAPI and allows an attacker to masquerade as a legitimate entity. The bug, which carries a vulnerability score of 7.5 out of a possible 10, was patched in August 2022 but …

agency akamai application application programming interface bug called concept cryptoapi cryptography cve cve-2022-34689 cyber cyber security deal exploit interface microsoft national national cyber security centre national security national security agency programming proof-of-concept researchers score security tool united united kingdom vulnerability windows