Microsoft Windows Remote Desktop Licensing Service Security Feature Bypass Vulnerability

A vulnerability exists in the Windows Remote Desktop Licensing Service due to missing authentication for a critical function. This flaw allows an unauthorized attacker to bypass a security feature over the network. Specifically, an attacker in a machine-in-the-middle position could exploit this vulnerability to bypass certificate validation when a user connects to a trusted server.

Impact

Exploitation of this vulnerability could lead to unauthorized bypassing of security features, specifically allowing attackers to manipulate certificate validations in remote desktop sessions.

Remediation

Users can apply the security update available through the Microsoft Update Catalog. Specific update details can be found in the Microsoft Knowledge Base articles KB5062597, KB5062592, KB5062632, KB5062560, KB5062553, KB5062570, KB5062554, KB5062552, KB5062557, and KB5062557.