PT-2017-12261 · Microsoft · Windows 10+1

Publicado 2017-10-10 · Atualizado 2019-10-03 · CVE-2017-11829

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Windows 10 (affected versions not specified)

Description The issue is related to an elevation of privilege when the Windows Update Delivery Optimization does not properly enforce file share permissions, allowing attackers to affect the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Files Accessible to External Parties

Enumeração de Fraquezas

CWE-552

Identificadores relacionados

CVE-2017-11829

Produtos afetados

Windows

Windows 10

Referências · 7

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-11829 · Nota de Segurança
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-11829 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-11829 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-11829 · Aviso do Fabricante
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2017-11829 · Aviso do Fabricante
• http://securityfocus.com/bid/101213 · Nota
• http://securitytracker.com/id/1039526 · Nota