PT-2019-1426

CVE-2019-0649

·

Published

2019-02-12

·

Updated

2022-05-13

Description by

CVSS 3.1
8.1
High
MetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Microsoft Chakra JIT server (affected versions not specified)
Description A vulnerability exists in the Microsoft Chakra JIT server, related to unsafe privilege management. This issue could allow a remote attacker to impact the confidentiality and integrity of protected information. The vulnerability can be exploited to gain elevated privileges, although it does not allow arbitrary code execution on its own. However, it could be used in combination with other vulnerabilities, such as remote code execution and elevation of privilege vulnerabilities, to take advantage of the elevated privileges.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Related identifiers
GHSA-6C6R-39CV-X5FQ
Found an issue in the description? Have something to add? Feel free to write us 👾