MC554144 – 30-Day Reminder: New hardening phase for addressing CVE-2022-37967 starts in June (archived)

Product:

Office 365 general, Windows

Platform:

World tenant

Status:

Change type:

Admin impact

Links:

Details:

Security hardening changes needed on domain controllers in IT environments to address CVE-2022-37967 will enter a new phase of security requirement on June 13, 2023, as outlined in KB5020805: How to manage Kerberos protocol changes related to CVE-2022-37967.


Each phase raises the default minimum for the security hardening changes for CVE-2022-37967, and environments must be compliant before installing updates for each phase onto your domain controller.


When this will happen:
Starting June 13, 2023, updates addressing CVE-2022-37967 will enter a new phase of security requirements. There will also be two more phases later in the year: July 11, 2023 begins initial enforcement phase, and October 10, 2023 begins full enforcement phase.

Change Category:
XXXXXXX ... free basic plan only

Scope:
XXXXXXX ... free basic plan only

Release Phase:

Created:
2023-05-13

updated:
2023-05-13

Task Type

XXXXXXX ... free basic plan only

Docu to Check

XXXXXXX ... free basic plan only

MS How does it affect me

XXXXXXX ... free basic plan only

MS Preperations

XXXXXXX ... free basic plan only

MS Urgency

XXXXXXX ... free basic plan only

MS workload name

XXXXXXX ... free basic plan only