Kerberos Security Feature Bypass Vulnerability

<p>A security feature bypass vulnerability exists in Windows when Kerberos improperly handles a password change request and falls back to NT LAN Manager (<a href="https://technet.microsoft.com/en-us/library/security/dn848375.aspx#NTLM">NTLM</a>) Authentication Protocol as the default authentication protocol.</p> <p>An attacker who successfully exploited this vulnerability could use it to bypass Kerberos authentication. To exploit this vulnerability, an attacker would have to be able to launch a man-in-the-middle (<a href="https://technet.microsoft.com/en-us/library/security/dn848375.aspx#MiTM">MiTM</a>) attack against the traffic passing between a domain controller and the target machine.</p> <p>The update addresses this vulnerability by preventing Kerberos from falling back to NTLM as the default authentication protocol during a domain account password change.</p>

Where it's fixed