PT-2023-11450 · Microsoft · Powershell App Deployment Toolkit

Luki1412 · Publicado 2023-08-01 · Atualizado 2023-08-08 · CVE-2020-10962

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PowerShell App Deployment Toolkit versions prior to 3.8.1

Description The issue is related to an incorrect access control vulnerability in the default configuration, which may allow an authenticated user to potentially enable escalation of privilege via local access.

Recommendations For PowerShell App Deployment Toolkit versions prior to 3.8.1, update to version 3.8.1 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2020-10962

Produtos afetados

Powershell App Deployment Toolkit

Referências · 5

• https://github.com/PSAppDeployToolkit/PSAppDeployToolkit/releases · Nota
• https://discourse.psappdeploytoolkit.com/t/psappdeploytoolkit-3-8-2/2555 · Nota
• https://osv.dev/vulnerability/CVE-2020-10962 · Aviso do Fabricante
• https://twitter.com/geekphane/status/1689148484891648000 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2020-10962 · Nota de Segurança