PT-2024-4974 · Microsoft · Windows Backup Service+1

·

CVE-2024-38013

·

تاريخ النشر

2024-07-09

·

تاريخ التحديث

2024-07-11

CVSS v2.0

6.8

متوسطة

المتجهAV:L/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Microsoft Windows Server Backup (affected versions not specified)
Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Backup Service, which is caused by incorrect handling of symbolic links before accessing a file. This could allow an attacker to elevate their privileges.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Link Following

وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾

تصنيف نقاط الضعف

المعرّفات ذات الصلة

BDU:2024-05498
CVE-2024-38013

المنتجات المتأثرة

Windows Backup Service
Windows