Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability

🗓️ 08 Sep 2020 07:00:00Reported by MicrosoftType

mscve

mscve🔗 msrc.microsoft.com👁 32 Views

Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability. Improper file operation handling allows attacker to run processes in elevated context. Update corrects file operation handling.

Reporter	Title	Published	Views	Family All 36
Information Security Automation	Microsoft Patch Tuesday September 2020: Zerologon and other exploits, RCEs in SharePoint and Exchange	30 Sep 202023:46	–	avleonov
CNVD	Microsoft Windows/Windows Server Elevation of Privilege Vulnerability (CNVD-2021-90797)	10 Sep 202000:00	–	cnvd
CVE	CVE-2020-1133	11 Sep 202017:09	–	cve
Cvelist	CVE-2020-1133 Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability	11 Sep 202017:09	–	cvelist
EUVD	EUVD-2020-12018	7 Oct 202500:30	–	euvd
Microsoft KB	September 8, 2020—KB4570333 (OS Build 17763.1457)	9 Feb 202108:00	–	mskb
Microsoft KB	September 8, 2020—KB4571756 (OS Build 19041.508)	9 Feb 202108:00	–	mskb
Microsoft KB	September 8, 2020—KB4574727 (OS Builds 18362.1082 and 18363.1082) - EXPIRED	9 Feb 202108:00	–	mskb
Microsoft KB	Description of the security update for the elevation of privilege vulnerability in Microsoft Visual Studio 2015 Update 3: September 8, 2020	8 Sep 202007:00	–	mskb
Microsoft KB	September 8, 2020—KB4577015 (OS Build 14393.3930)	9 Feb 202108:00	–	mskb

Vulners

Node

microsoft windows_10_version_1909_for_x64-based_systems

OR

microsoft windows_10_version_1909_for_32-bit_systems

OR

microsoft windows_server_2019_(server_core_installation)

OR

microsoft windows_server_2019

OR

microsoft windows_10_version_1809_for_arm64-based_systems

OR

microsoft windows_10_version_1809_for_x64-based_systems

OR

microsoft windows_10_version_1809_for_32-bit_systems

OR

microsoft windows_10_version_1803_for_arm64-based_systems

OR

microsoft windows_10_version_1803_for_x64-based_systems

OR

microsoft windows_10_version_1803_for_32-bit_systems

OR

microsoft windows_server_2016_(server_core_installation)

OR

microsoft windows_server_2016

OR

microsoft windows_10_version_1607_for_x64-based_systems

OR

microsoft windows_10_version_1607_for_32-bit_systems

OR

microsoft windows_10_for_x64-based_systems

OR

microsoft windows_10_for_32-bit_systems

OR

microsoft windows_server,_version_2004_(server_core_installation)

OR

microsoft windows_10_version_2004_for_x64-based_systems

OR

microsoft windows_10_version_2004_for_arm64-based_systems

OR

microsoft windows_10_version_2004_for_32-bit_systems

OR

microsoft windows_server,_version_1903_(server_core_installation)

OR

microsoft windows_10_version_1903_for_arm64-based_systems

OR

microsoft windows_10_version_1903_for_x64-based_systems

OR

microsoft windows_10_version_1903_for_32-bit_systems

OR

microsoft windows_10_version_1709_for_arm64-based_systems

OR

microsoft windows_10_version_1709_for_x64-based_systems

OR

microsoft windows_10_version_1709_for_32-bit_systems

OR

microsoft windows_server,_version_1909_(server_core_installation)

OR

microsoft windows_10_version_1909_for_arm64-based_systems

OR

microsoft visual_studio_2015_update_3

OR

microsoft visual_studio_2019_version_16.4_(includes_16.0_-_16.3)

OR

microsoft visual_studio_2019_version_16.0

OR

microsoft visual_studio_2017_version_15.9_(includes_15.0_-_15.8)

OR

microsoft visual_studio_2019_version_16.7_(includes_16.0_16.6)

08 Sep 2020 07:00Current

3.2Low risk

Vulners AI Score3.2

CVSS 24.6

CVSS 3.15.5 - 7.8

CVSS 35.5

EPSS0.00407

diagnostics hub elevation of privilege vulnerability file operations attacker exploitation update microsoft