PT-2019-2779 · Microsoft · Windows Defender Application Control

Publicado 2019-07-16 · Atualizado 2020-08-24 · CVE-2019-1167

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Média

Vetor base

AV:L/AC:H/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Windows Defender Application Control (WDAC) (affected versions not specified)

Description A security feature bypass issue exists in Windows Defender Application Control (WDAC), potentially allowing an attacker to bypass WDAC enforcement. The vulnerability is related to errors in security settings and could enable an attacker to bypass the PowerShell Core Constrained Language Mode, impacting the integrity, confidentiality, and availability of protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-254

Identificadores relacionados

BDU:2019-02727

CVE-2019-1167

GHSA-5FRH-8CMJ-GC59

Produtos afetados

Windows Defender Application Control

Referências · 7

• https://github.com/PowerShell/PowerShell/security/advisories/GHSA-5frh-8cmj-gc59 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-1167 · Nota de Segurança
• https://github.com/advisories/GHSA-5frh-8cmj-gc59 · Nota
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1167 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-5frh-8cmj-gc59 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-02727 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-1167 · Aviso do Fabricante