Git for Windows NTLM Hash Disclosure Vulnerability

A vulnerability in Git for Windows prior to version 2.53.0(2) allows for the extraction of a user's NTLM hash. This is achieved by convincing the user to clone a repository from a malicious server. The weakness in NTLM hashing could enable an attacker to brute-force the user's account name and password.

Impact

Exploitation of this vulnerability could lead to the unauthorized disclosure of user credentials by allowing an attacker to capture and brute-force the NTLMv2 hash obtained during the cloning process.

Reproduction

To reproduce this vulnerability, an attacker must control a server that the target user clones a repository from. When the user initiates the clone, the server can capture the NTLM hash of the user.

Remediation

Users can upgrade to Git for Windows version 2.53.0(2) or later, where this vulnerability has been addressed.