PT-2019-4155 · Microsoft · Visual Studio Live Share

Publicado 2019-12-10 · Atualizado 2019-12-16 · CVE-2019-1486

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Visual Studio Live Share (affected versions not specified)

Description A spoofing issue exists in Visual Studio Live Share, where a guest connected to a Live Share session can be redirected to an arbitrary URL specified by the session host. This is related to security setting errors in the Live Share extension of Microsoft Visual Studio. Exploitation of this issue may allow a remote attacker to redirect a user to a malicious URL by convincing them to connect to a specially crafted Live Share session.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Open Redirect

Improper Privilege Management

Enumeração de Fraquezas

CWE-601

CWE-269

Identificadores relacionados

BDU:2019-04739

CVE-2019-1486

Produtos afetados

Visual Studio Live Share

Referências · 6

• https://vuldb.com/?id.146920 · Nota
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1486 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-04739 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-1486 · Aviso do Fabricante
• https://cxsecurity.com/cveshow/CVE-2019-1486 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-1486 · Nota de Segurança