Lucene search

[email protected]CVE-2019-0727

HistoryMay 16, 2019 - 7:29 p.m.

CVE-2019-0727

2019-05-1619:29:00

[email protected]

web.nvd.nist.gov

cve-2019-0727

elevation of privilege

vulnerability

diagnostics hub

visual studio

7.2 High

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

9.6%

JSON

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka ‘Diagnostic Hub Standard Collector, Visual Studio Standard Collector Elevation of Privilege Vulnerability’.

Affected configurations

Vulners

NVD

Node

microsoftvisual_studio

microsoftwindows

microsoftwindows_server

microsoftvisual_studioRangeversion 15.9–2017

microsoftvisual_studioRange15.0–2017

microsoftwindows_10_1903 for 32-bit systemsMatchunspecified

microsoftwindows_10_1903 for x64-based systemsMatchunspecified

microsoftwindows_10_1903 for arm64-based systemsMatchunspecified

microsoftwindows_server,_version_1903Matchunspecified

microsoftvisual_studioRange16.0–2019

VendorProductVersionCPE
microsoftvisual_studio*cpe:2.3:a:microsoft:visual_studio:*:*:*:*:*:*:*:*
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	visual_studio	*	cpe:2.3:a:microsoft:visual_studio::::::::
microsoft	windows	*	cpe:2.3:o:microsoft:windows::::::::
microsoft	windows	*	cpe:2.3:o:microsoft:windows::::::::
microsoft	windows	*	cpe:2.3:o:microsoft:windows::::::::
microsoft	windows	*	cpe:2.3:o:microsoft:windows::::::::
microsoft	windows	*	cpe:2.3:o:microsoft:windows::::::::
microsoft	windows	*	cpe:2.3:o:microsoft:windows::::::::
microsoft	windows	*	cpe:2.3:o:microsoft:windows::::::::
microsoft	windows	*	cpe:2.3:o:microsoft:windows::::::::
microsoft	windows	*	cpe:2.3:o:microsoft:windows::::::::

Rows per page:

1-10 of 281

CNA Affected

[
  {
    "product": "Microsoft Visual Studio",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2015 Update 3"
      }
    ]
  },
  {
    "product": "Windows",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "10 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "10 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "10 Version 1607 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "10 Version 1607 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "10 Version 1703 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "10 Version 1703 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "10 Version 1709 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "10 Version 1709 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "10 Version 1803 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "10 Version 1803 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "10 Version 1803 for ARM64-based Systems"
      },
      {
        "status": "affected",
        "version": "10 Version 1809 for 32-bit Systems"
      },
      {
        "status": "affected",
        "version": "10 Version 1809 for x64-based Systems"
      },
      {
        "status": "affected",
        "version": "10 Version 1809 for ARM64-based Systems"
      },
      {
        "status": "affected",
        "version": "10 Version 1709 for ARM64-based Systems"
      }
    ]
  },
  {
    "product": "Windows Server",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2016"
      },
      {
        "status": "affected",
        "version": "2016  (Core installation)"
      },
      {
        "status": "affected",
        "version": "version 1803  (Core Installation)"
      },
      {
        "status": "affected",
        "version": "2019"
      },
      {
        "status": "affected",
        "version": "2019  (Core installation)"
      }
    ]
  },
  {
    "product": "Microsoft Visual Studio 2017",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "version 15.9"
      },
      {
        "status": "affected",
        "version": "15.0"
      }
    ]
  },
  {
    "product": "Windows 10 Version 1903 for 32-bit Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Windows 10 Version 1903 for x64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Windows 10 Version 1903 for ARM64-based Systems",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Windows Server, version 1903 (Server Core installation)",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  },
  {
    "product": "Microsoft Visual Studio 2019",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "16.0"
      }
    ]
  }
]