PT-2018-2055 · Microsoft · Windows 10 Servers+5
Bryan De Houwer
·
Publicado
2018-12-11
·
Atualizado
2020-09-14
·
CVE-2018-8599
CVSS v3.1
7.8
Alta
| Vetor | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Microsoft Visual Studio (affected versions not specified)
Windows Server 2019 (affected versions not specified)
Windows Server 2016 (affected versions not specified)
Windows 10 (affected versions not specified)
Windows 10 Servers (affected versions not specified)
Description
The issue is related to insufficient access restrictions in the Diagnostics Hub Standard Collector Service of Microsoft Visual Studio on Windows operating systems. It allows an attacker to elevate their privileges by improperly impersonating certain file operations.
Recommendations
For Microsoft Visual Studio, update to a version that includes the fix for the Diagnostics Hub Standard Collector Service elevation of privilege issue.
For Windows Server 2019, apply the necessary patch or update to resolve the elevation of privilege vulnerability in the Diagnostics Hub Standard Collector Service.
For Windows Server 2016, apply the necessary patch or update to resolve the elevation of privilege vulnerability in the Diagnostics Hub Standard Collector Service.
For Windows 10, apply the necessary patch or update to resolve the elevation of privilege vulnerability in the Diagnostics Hub Standard Collector Service.
For Windows 10 Servers, apply the necessary patch or update to resolve the elevation of privilege vulnerability in the Diagnostics Hub Standard Collector Service.
Correção
LPE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Visual Studio
Windows
Windows 10
Windows 10 Servers
Windows Server 2016
Windows Server 2019