A security feature bypass vulnerability exists where a NETLOGON message is able to obtain the session key and sign messages.To exploit this vulnerability, an attacker could send a specially crafted authentication request, aka 'Microsoft Windows Security Feature Bypass Vulnerability'.

References

• https://nvd.nist.gov/vuln/detail/CVE-2019-1019
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1019
• http://packetstormsecurity.com/files/153639/Microsoft-Windows-HTTP-To-SMB-NTLM-Reflection-Privilege-Escalation.html