Microsoft Windows Task Scheduler SetJobFileSecurityByName privilege escalation vulnerability

🗓️ 22 May 2019 00:00:00Reported by SandboxEscaperType

Windows Task Scheduler SetJobFileSecurityByName privilege escalation vulnerability. Allows authenticated user to gain SYSTEM privileges by modifying job file permissions, leading to system compromise. Legacy exploit code functions on Windows 10, Server 2016, and Server 2019

Reporter	Title	Published	Views	Family All 42
ATTACKERKB	CVE-2019-1069	12 Jun 201900:00	–	attackerkb
ATTACKERKB	PolarBear	12 Jun 201900:00	–	attackerkb
Circl	CVE-2019-1069	23 May 201908:09	–	circl
CISA KEV Catalog	Microsoft Task Scheduler Privilege Escalation Vulnerability	15 Mar 202200:00	–	cisa_kev
CISA	CISA Adds 15 Known Exploited Vulnerability to Catalog	15 Mar 202200:00	–	cisa
CISA	CISA Adds Five Known Exploited Vulnerabilities to Catalog	18 Sep 202412:00	–	cisa
Check Point Advisories	Microsoft Task Scheduler Elevation of Privilege (CVE-2019-1069)	11 Jun 201900:00	–	checkpoint_advisories
CVE	CVE-2019-1069	12 Jun 201913:49	–	cve
Cvelist	CVE-2019-1069 Task Scheduler Elevation of Privilege Vulnerability	12 Jun 201913:49	–	cvelist
Microsoft KB	June 11, 2019—KB4503267 (OS Build 14393.3025)	11 Jun 201907:00	–	mskb

Source	Link
github	www.github.com/SandboxEscaper/polarbearrepo
docs	www.docs.microsoft.com/en-us/windows/desktop/api/aclapi/nf-aclapi-setsecurityinfo
docs	www.docs.microsoft.com/en-us/windows/desktop/fileio/hard-links-and-junctions
portal	www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1069
thezdi	www.thezdi.com/blog/2019/6/11/exploiting-the-windows-task-scheduler-through-cve-2019-1069

12 Jun 2019 17:30Current

8High risk

Vulners AI Score8

CVSS 27.2

CVSS 3.17.8

EPSS0.32495

SSVC