Windows Credential Guard TGT Renewal Information Disclosure

On Windows, the Kerberos ticket renewal process can be used with CG to get an unencrypted TGT session key for a currently authenticated user leading to information disclosure.