Lucene search

[email protected]NVD:CVE-2018-0952

HistoryAug 15, 2018 - 5:29 p.m.

CVE-2018-0952

2018-08-1517:29:00

[email protected]

web.nvd.nist.gov

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.003

Percentile

71.1%

JSON

An Elevation of Privilege vulnerability exists when Diagnostics Hub Standard Collector allows file creation in arbitrary locations, aka “Diagnostic Hub Standard Collector Elevation Of Privilege Vulnerability.” This affects Windows Server 2016, Windows 10, Microsoft Visual Studio, Windows 10 Servers.

Affected configurations

Nvd

Node

microsoftvisual_studio_2015Match-update3

microsoftvisual_studio_2017Match-

microsoftvisual_studio_2017Match15.8

microsoftwindows_10Match-

microsoftwindows_10Match1607

microsoftwindows_10Match1703

microsoftwindows_10Match1709

microsoftwindows_10Match1803

microsoftwindows_server_2016Match-

microsoftwindows_server_2016Match1709

microsoftwindows_server_2016Match1803

VendorProductVersionCPE
microsoftvisual_studio_2015-cpe:2.3:a:microsoft:visual_studio_2015:-:update3:*:*:*:*:*:*
microsoftvisual_studio_2017-cpe:2.3:a:microsoft:visual_studio_2017:-:*:*:*:*:*:*:*
microsoftvisual_studio_201715.8cpe:2.3:a:microsoft:visual_studio_2017:15.8:*:*:*:*:*:*:*
microsoftwindows_10-cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*
microsoftwindows_101607cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*
microsoftwindows_101703cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*
microsoftwindows_101709cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*
microsoftwindows_101803cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*
microsoftwindows_server_2016-cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*
microsoftwindows_server_20161709cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	visual_studio_2015	-	cpe:2.3:a:microsoft:visual_studio_2015:-:update3::::::
microsoft	visual_studio_2017	-	cpe:2.3:a:microsoft:visual_studio_2017:-:::::::*
microsoft	visual_studio_2017	15.8	cpe:2.3:a:microsoft:visual_studio_2017:15.8:::::::*
microsoft	windows_10	-	cpe:2.3:o:microsoft:windows_10:-:::::::*
microsoft	windows_10	1607	cpe:2.3:o:microsoft:windows_10:1607:::::::*
microsoft	windows_10	1703	cpe:2.3:o:microsoft:windows_10:1703:::::::*
microsoft	windows_10	1709	cpe:2.3:o:microsoft:windows_10:1709:::::::*
microsoft	windows_10	1803	cpe:2.3:o:microsoft:windows_10:1803:::::::*
microsoft	windows_server_2016	-	cpe:2.3:o:microsoft:windows_server_2016:-:::::::*
microsoft	windows_server_2016	1709	cpe:2.3:o:microsoft:windows_server_2016:1709:::::::*