PT-2018-1485 · Microsoft · Windows 10 Servers+5
Ryan Hanson
·
Publicado
2018-08-14
·
Atualizado
2019-10-03
·
CVE-2018-0952
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Windows Server 2016
Windows 10
Microsoft Visual Studio
Windows 10 Servers
Description
The issue is related to an Elevation of Privilege vulnerability in Diagnostics Hub Standard Collector, which allows file creation in arbitrary locations. This is due to insufficient access restrictions. An attacker can exploit this vulnerability by creating a specially crafted application to create files in any location on the disk.
Recommendations
For Windows Server 2016, update to a version that includes the fix for this issue.
For Windows 10, update to a version that includes the fix for this issue.
For Microsoft Visual Studio, update to a version that includes the fix for this issue.
For Windows 10 Servers, update to a version that includes the fix for this issue.
As a temporary workaround, consider restricting access to the Diagnostics Hub Standard Collector until a patch is available.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Diagnostics Hub Standard Collector
Visual Studio
Windows
Windows 10
Windows 10 Servers
Windows Server 2016