PT-2019-1426
CVE-2019-0649
·
Published
2019-02-12
·
Updated
2022-05-13
Description by
CVSS 3.1
8.1
HighMetricsAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Microsoft Chakra JIT server (affected versions not specified)
Description
A vulnerability exists in the Microsoft Chakra JIT server, related to unsafe privilege management. This issue could allow a remote attacker to impact the confidentiality and integrity of protected information. The vulnerability can be exploited to gain elevated privileges, although it does not allow arbitrary code execution on its own. However, it could be used in combination with other vulnerabilities, such as remote code execution and elevation of privilege vulnerabilities, to take advantage of the elevated privileges.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾