PT-2023-11450 · Microsoft · Powershell App Deployment Toolkit

Luki1412 · Published 2023-08-01 · Updated 2023-08-08 · CVE-2020-10962

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PowerShell App Deployment Toolkit versions prior to 3.8.1

Description The issue is related to an incorrect access control vulnerability in the default configuration, which may allow an authenticated user to potentially enable escalation of privilege via local access.

Recommendations For PowerShell App Deployment Toolkit versions prior to 3.8.1, update to version 3.8.1 or later to resolve the issue.

Fix

Related Identifiers

CVE-2020-10962

Affected Products

Powershell App Deployment Toolkit

References · 5

• https://osv.dev/vulnerability/CVE-2020-10962 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-10962 · Security Note
• https://github.com/PSAppDeployToolkit/PSAppDeployToolkit/releases · Note
• https://discourse.psappdeploytoolkit.com/t/psappdeploytoolkit-3-8-2/2555 · Note
• https://twitter.com/geekphane/status/1689148484891648000 · Twitter Post