PT-2018-9092 · Microsoft · Windows Server 2016+2

Publicado 2018-02-13 · Atualizado 2019-10-03 · CVE-2018-0828

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Windows 10 version 1607 Windows Server 2016

Description: The issue is related to how the MultiPoint management account password is stored, allowing an elevation of privilege. This could potentially enable attackers to affect the system.

Recommendations: For Windows 10 version 1607, update the system to address the issue. For Windows Server 2016, apply the necessary patch to resolve the elevation of privilege vulnerability.

Correção

LPE

Insufficiently Protected Credentials

Enumeração de Fraquezas

CWE-522

Identificadores relacionados

CVE-2018-0828

Produtos afetados

Windows

Windows 10

Windows Server 2016

Referências · 7

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0828 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-0828 · Nota de Segurança
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-0828 · Nota de Segurança
• https://msrc.microsoft.com/update-guide/en-US/advisory/CVE-2018-0828 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-0828 · Aviso do Fabricante
• http://securitytracker.com/id/1040373 · Nota
• http://securityfocus.com/bid/102935 · Nota