{"id":866,"date":"2023-03-28T04:01:47","date_gmt":"2023-03-27T19:01:47","guid":{"rendered":"https:\/\/m365jp.xyz\/?p=866"},"modified":"2023-03-28T04:09:15","modified_gmt":"2023-03-27T19:09:15","slug":"mc533707-reminder-the-third-deployment-phase-for-cve-2022-37967-starts-with-updates-released-april-11-2023","status":"publish","type":"post","link":"https:\/\/m365jp.net\/index.php\/2023-03-28-mc533707-reminder-the-third-deployment-phase-for-cve-2022-37967-starts-with-updates-released-april-11-2023","title":{"rendered":"MC533707 | Reminder: The Third deployment phase for CVE-2022-37967 starts with updates released April 11, 2023"},"content":{"rendered":"
\n
\n
\n\n\n\n
MC533707 | Reminder: The Third deployment phase for CVE-2022-37967 starts with updates released April 11, 2023<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n
\n\n\n\n\n\n\n\n\n\n
Classification<\/th>\npreventOrFixIssue<\/td>\n<\/tr>\n
Last Updated<\/th>\n03\/27\/2023 18:02:55<\/td>\n<\/tr>\n
Start Time<\/th>\n03\/27\/2023 18:02:54<\/td>\n<\/tr>\n
End Time<\/th>\n04\/11\/2024 17:00:00<\/td>\n<\/tr>\n
Action Required By Date<\/th>\n2023-04-11T17:00:00Z<\/td>\n<\/tr>\n
Message Content<\/th>\n\n
Security hardening changes to address CVE-2022-37967<\/a> will enter the Third deployment phase with the release of updates on April 11, 2023, as outlined in KB5020805: How to manage Kerberos protocol changes related to CVE-2022-37967<\/a>. Each phase raises the default minimum for the security hardening changes for CVE-2022-37967<\/a> and your environment must be compliant before installing updates for each phase onto your Domain Controller.<\/div>\n
<\/div>\n
When this will happen:<\/strong><\/div>\n
CVE-2022-37967<\/a> will enter the Third deployment phase with the release of updates on April 11, 2023. There will also be two more phases after the Third deployment phase; July 11, 2023 – Initial enforcement phase and October 10, 2023 – Full enforcement phases.<\/div>\n
<\/div>\n
How this will affect your organization:<\/strong><\/div>\n
Your environment must be compliant with the hardening changes before installing updates for each phase onto your Domain Controller. To enable all parts of the security hardening in your environment, it is recommended to move to enforcement mode as soon as possible.<\/div>\n
<\/div>\n
What you need to do to prepare:<\/strong><\/div>\n
If you are using the workaround to disable PAC signature addition by setting the KrbtgtFullPacSignature<\/strong> subkey to a value of 0<\/strong>, you will no longer be able to use this workaround after installing updates released April 11, 2023. Your apps and environment will need to at least be compliant with KrbtgtFullPacSignature<\/strong> subkey to a value of 1 to install these updates on your Domain Controllers.<\/div>\n
Machine Translation<\/th>\n\n
CVE-2022-37967\u306b\u5bfe\u51e6\u3059\u308b\u305f\u3081\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5f37\u5316\u306e\u5909\u66f4\u306f\u3001KB5020805:CVE-2022-37967\u306b\u95a2\u9023\u3059\u308bKerberos\u30d7\u30ed\u30c8\u30b3\u30eb\u306e\u5909\u66f4\u3092\u7ba1\u7406\u3059\u308b\u65b9\u6cd5<\/a>\u3067\u8aac\u660e\u3055\u308c\u3066\u3044\u308b\u3088\u3046\u306b\u30012023<\/a>\u5e744\u670811\u65e5\u306e\u66f4\u65b0\u30d7\u30ed\u30b0\u30e9\u30e0\u306e\u30ea\u30ea\u30fc\u30b9\u3067\u7b2c3\u5c55\u958b\u30d5\u30a7\u30fc\u30ba\u306b\u5165\u308a\u307e\u3059\u3002\u5404\u30d5\u30a7\u30fc\u30ba\u3067\u306f\u3001CVE-2022-37967<\/a> \u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5f37\u5316\u306e\u5909\u66f4\u306e\u65e2\u5b9a\u306e\u6700\u5c0f\u5024\u304c\u5f15\u304d\u4e0a\u3052\u3089\u308c\u3001\u5404\u30d5\u30a7\u30fc\u30ba\u306e\u66f4\u65b0\u30d7\u30ed\u30b0\u30e9\u30e0\u3092\u30c9\u30e1\u30a4\u30f3 \u30b3\u30f3\u30c8\u30ed\u30fc\u30e9\u30fc\u306b\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3059\u308b\u524d\u306b\u3001\u74b0\u5883\u304c\u6e96\u62e0\u3057\u3066\u3044\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/div>\n
<\/div>\n
\u3053\u308c\u304c\u767a\u751f\u3059\u308b\u5834\u5408:<\/strong><\/div>\n
CVE-2022-37967\u306f\u30012023<\/a> \u5e744\u670811\u65e5\u306e\u30a2\u30c3\u30d7\u30c7\u30fc\u30c8\u306e\u30ea\u30ea\u30fc\u30b9\u3067\u7b2c3\u5c55\u958b\u30d5\u30a7\u30fc\u30ba\u306b\u5165\u308a\u307e\u3059\u3002\u307e\u305f\u3001\u7b2c 3 \u5c55\u958b\u30d5\u30a7\u30fc\u30ba\u306e\u5f8c\u306b\u3055\u3089\u306b 2 \u3064\u306e\u30d5\u30a7\u30fc\u30ba\u304c\u3042\u308a\u307e\u3059\u30022023 \u5e74 7 \u6708 11 \u65e5 – \u6700\u521d\u306e\u9069\u7528\u30d5\u30a7\u30fc\u30ba\u3068 2023 \u5e74 10 \u6708 10 \u65e5 – \u5b8c\u5168\u306a\u9069\u7528\u30d5\u30a7\u30fc\u30ba\u3002<\/div>\n
<\/div>\n
\u3053\u308c\u304c\u7d44\u7e54\u306b\u4e0e\u3048\u308b\u5f71\u97ff:<\/strong><\/div>\n
\u74b0\u5883\u306f\u3001\u5404\u30d5\u30a7\u30fc\u30ba\u306e\u66f4\u65b0\u30d7\u30ed\u30b0\u30e9\u30e0\u3092\u30c9\u30e1\u30a4\u30f3 \u30b3\u30f3\u30c8\u30ed\u30fc\u30e9\u30fc\u306b\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3059\u308b\u524d\u306b\u3001\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5f37\u5316\u306e\u5909\u66f4\u306b\u6e96\u62e0\u3057\u3066\u3044\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002\u74b0\u5883\u5185\u306e\u3059\u3079\u3066\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5f37\u5316\u3092\u6709\u52b9\u306b\u3059\u308b\u306b\u306f\u3001\u3067\u304d\u308b\u3060\u3051\u65e9\u304f\u5f37\u5236\u30e2\u30fc\u30c9\u306b\u79fb\u884c\u3059\u308b\u3053\u3068\u3092\u304a\u52e7\u3081\u3057\u307e\u3059\u3002<\/div>\n
<\/div>\n
\u6e96\u5099\u3059\u308b\u305f\u3081\u306b\u5fc5\u8981\u306a\u3053\u3068:<\/strong><\/div>\n
\u56de\u907f\u7b56\u3092\u4f7f\u7528\u3057\u3066\u3001KrbtgtFullPacSignature<\/strong> \u30b5\u30d6\u30ad\u30fc \u306e\u5024\u3092 0<\/strong> \u306b\u8a2d\u5b9a\u3057\u3066 PAC \u7f72\u540d\u306e\u8ffd\u52a0\u3092\u7121\u52b9\u306b\u3057\u3066\u3044\u308b\u5834\u5408\u30012023 \u5e74 4 \u6708 11 \u65e5\u306b\u30ea\u30ea\u30fc\u30b9\u3055\u308c\u305f\u66f4\u65b0\u30d7\u30ed\u30b0\u30e9\u30e0\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u305f\u5f8c\u306f\u3001\u3053\u306e\u56de\u907f\u7b56\u3092\u4f7f\u7528\u3067\u304d\u306a\u304f\u306a\u308a\u307e\u3059\u3002\u30a2\u30d7\u30ea\u3068\u74b0\u5883\u306f\u3001\u30c9\u30e1\u30a4\u30f3 \u30b3\u30f3\u30c8\u30ed\u30fc\u30e9\u30fc\u306b\u3053\u308c\u3089\u306e\u66f4\u65b0\u30d7\u30ed\u30b0\u30e9\u30e0\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3059\u308b\u305f\u3081\u306b\u3001\u5c11\u306a\u304f\u3068\u3082 KrbtgtFullPacSignature<\/strong> \u30b5\u30d6\u30ad\u30fc \u306b\u5024 1 \u306b\u6e96\u62e0\u3057\u3066\u3044\u308b\u5fc5\u8981\u304c\u3042\u308a\u307e\u3059\u3002<\/div>\n
CVE-2022-37967<\/a> \u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u5f37\u5316\u306b\u95a2\u9023\u3059\u308b\u554f\u984c\u306e\u56de\u907f\u7b56\u3092\u4f7f\u7528\u3057\u3066\u3044\u306a\u3044\u5834\u5408\u3067\u3082\u3001\u6b21\u306e\u30d5\u30a7\u30fc\u30ba\u3067\u74b0\u5883\u5185\u306e\u554f\u984c\u306b\u5bfe\u51e6\u3059\u308b\u5fc5\u8981\u304c\u3042\u308b\u5834\u5408\u304c\u3042\u308a\u307e\u3059\u30022023 \u5e74 7 \u6708 11 \u65e5 – \u6700\u521d\u306e\u9069\u7528\u30d5\u30a7\u30fc\u30ba\u3068 2023 \u5e74 10 \u6708 10 \u65e5 – \u5b8c\u5168\u306a\u9069\u7528\u30d5\u30a7\u30fc\u30ba\u3002<\/div>\n
<\/div>\n
\u8ffd\u52a0\u60c5\u5831:<\/strong><\/div>\n