Missing cryptographic step in Windows Kerberos allows an unauthorized attacker to elevate privileges over a network.
The product does not implement a required step in a cryptographic algorithm, resulting in weaker encryption than advertised by the algorithm.