PT-2019-1426 · Microsoft · Chakra Jit Server+1
Yuki Chen
·
Publicado
2019-02-12
·
Atualizado
2022-05-13
·
CVE-2019-0649
CVSS v3.1
8.1
Alta
| Vetor | AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Microsoft Chakra JIT server (affected versions not specified)
Description
A vulnerability exists in the Microsoft Chakra JIT server, related to unsafe privilege management. This issue could allow a remote attacker to impact the confidentiality and integrity of protected information. The vulnerability can be exploited to gain elevated privileges, although it does not allow arbitrary code execution on its own. However, it could be used in combination with other vulnerabilities, such as remote code execution and elevation of privilege vulnerabilities, to take advantage of the elevated privileges.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Improper Privilege Management
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Edge
Chakra Jit Server