MS15-122 - Important: Security Update for Kerberos to Address Security Feature Bypass (3105256) - Version: 1.1

Severity Rating: Important
Revision Note: V1.1 (December 9, 2015): Revised bulletin to remove all references to the requirement that an attacker have physical access to the target machine to exploit CVE-2015-6095. This is an informational change only. Customers who have already successfully installed the update do not need to take any action.
Summary: This security update resolves a security feature bypass in Microsoft Windows. An attacker could bypass Kerberos authentication on a target machine and decrypt drives protected by BitLocker. The bypass can be exploited only if the target system has BitLocker enabled without a PIN or USB key.