How Could PetitPotam Relay a Domain Controller's Authentication to AD CS? (archived 2026-11-01)

PetitPotam (CVE-2021-36942) made domain controllers send NTLM authentication that was relayed to AD CS web enrollment. How coercion and relay worked, and the fixes. Archived version of https://comcomponent.com/en/blog/windows-petitpotam-cve-2021-36942-ad-cs/, as published on 2026-11-01. The live article is maintained and may change after this date. First published 2026-10-31.

Authors

Publication Details

Journal
Zenodo (CERN European Organization for Nuclear Research)
Published
2026-11-01
DOI
https://doi.org/10.5281/zenodo.23856464
Primary Topic
User Authentication and Security Systems
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

How Could PetitPotam Relay a Domain Controller's Authentication to AD CS? (archived 2026-11-01)

Go Komura
Zenodo (CERN European Organization for Nuclear Research)
User Authentication and Security Systems
article

How Could PetitPotam Relay a Domain Controller's Authentication to AD CS? (archived 2026-11-01)

Go Komura
article en

Abstract

PetitPotam (CVE-2021-36942) made domain controllers send NTLM authentication that was relayed to AD CS web enrollment. How coercion and relay worked, and the fixes. Archived version of https://comcomponent.com/en/blog/windows-petitpotam-cve-2021-36942-ad-cs/, as published on 2026-11-01. The live article is maintained and may change after this date. First published 2026-10-31.

Zenodo (CERN European Organization for Nuclear Research)
Openalex Percentile: Top 6%
User Authentication and Security Systems
DOIOpen Access PDFOpenAlex
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.

Laika access coming soon
How Could PetitPotam Relay a Domain Controller's Authentication to AD CS? (archived 2026-11-01) — Go Komura · Zenodo (CERN European Organization for Nuclear Research) (2026) | TGRS Research Map | TGRS