locked
Security hole found in mapped drive RRS feed

  • General discussion

  • Steps to reproduce (Windows 7 Enterprise)

    1. Map drive with other user name & password
    2. Copy some files to local machine
    3. Disconnect the mapped drive

    Now without giving that user name & password, you can map the drive! Steps:

    1. Go to Recent places under Favorites
    2. Double click on Shared drive name.lnk

    Monday, September 19, 2011 1:43 PM

All replies

  • HemantPune wrote:

    Steps to reproduce (Windows 7 Enterprise)

    1. Map drive with other user name & password
    2. Copy some files to local machine
    3. Disconnect the mapped drive

    Now without giving that user name & password, you can map the drive!
    Steps:

    1. Go to Recent places under Favorites
    2. Double click on Shared drive name.lnk

    And where is the security hole? If you already knew the password in the
    first time you will know the password at reconnect, too. So this just
    helps you saving some keystrokes.


    Wolfgang
    Monday, September 19, 2011 4:57 PM
  • If drive is disconnected then it should ask for credentials again to connect that drive.

    Tuesday, September 20, 2011 5:23 AM