Vulnerability CVE-2020-0787

Vulnerability CVE-2020-0787

Published: 2020-03-12

Description:

An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.

See advisories in our WLB2 database:

	Topic	Author	Date
Med.	Background Intelligent Transfer Service Privilege Escalation	itm4n	12.06.2020

Type:

CWE-269

(Improper Privilege Management)

CVSS2 => (AV:L/AC:L/Au:N/C:C/I:C/A:C)

CVSS Base Score	Impact Subscore	Exploitability Subscore
7.2/10	10/10	3.9/10

Exploit range	Attack complexity	Authentication
Local	Low	No required
Confidentiality impact	Integrity impact	Availability impact
Complete	Complete	Complete

Affected software
Microsoft -> Windows 10
Microsoft -> Windows 7
Microsoft -> Windows 8.1
Microsoft -> Windows rt 8.1
Microsoft -> Windows server 2008
Microsoft -> Windows server 2012
Microsoft -> Windows server 2016
Microsoft -> Windows server 2019

References:

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0787

Copyright 2024, cxsecurity.com