Worklet: Remediation for CVE-2018-8581

Nic-Automox

December 9, 2020 at 9:10 pm UTC

This is a remediation for CVE-2018-8581 per this article:
https://msrc.microsoft.com/update-guide/en-us/vulnerability/CVE-2018-8581

The workaround is to remove a specific registry entry, which this worklet does:

Evaluation code:

1 line

Exit 1

Remediation code:

batch1 line

reg delete HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa /v DisableLoopbackCheck /f

Note that the above code is the CMD syntax and not Powershell, but that should run fine. If you run into any problems you can convert the above line into Powershell pretty easily.

This discussion is archived and closed to replies. Continue it in the Automox Community Slack.

Discuss on Slack