PT-2019-3305 · Microsoft · Windows Update Delivery Optimization+1

·

CVE-2019-1289

·

Publicado

2019-09-10

·

Atualizado

2024-12-25

CVSS v2.0

6.0

Média

VetorAV:L/AC:H/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Windows Update Delivery Optimization (affected versions not specified)
Description The issue is related to an elevation of privilege vulnerability in the Windows Update Delivery Optimization, which does not properly enforce file share permissions. This vulnerability can be exploited to allow an attacker to elevate their privileges. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Incorrect Authorization

Improper Privilege Management

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2019-03403
CVE-2019-1289

Produtos afetados

Windows
Windows Update Delivery Optimization