Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability

...

KLA12139 Multiple vulnerabilities in Microsoft Windows

Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to obtain sensitive information, bypass security restrictions, gain privileges, execute arbitrary code, cause denial of service, spoof user interface. Below is a complete list of...

PT-2021-2659

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description The issue is related to insufficient access restrictions in the Diagnostics Hub Standard Collector Service of Microsoft Windows operating systems. This can be exploited to elevate...

CVE-2021-28322: Improper Privilege Management

Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability...

CVE-2021-28321: Improper Link Resolution Before File Access

Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability...

CVE-2021-28313: Improper Privilege Management

Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability...

Microsoft Diagnostics Hub Standard Collector Service 后置链接漏洞

Microsoft Diagnostics Hub Standard Collector Service is a Win32 service from Microsoft USA. It is used to collect real-time ETW events and process them. A backlink vulnerability exists in Microsoft Diagnostics Hub Standard Collector Service. The following products and versions are affected:Window...

Microsoft Diagnostics Hub Standard Collector Service 权限许可和访问控制问题漏洞

Microsoft Diagnostics Hub Standard Collector Service is a Win32 service from Microsoft USA. It is used to collect real-time ETW events and process them. Microsoft Diagnostics Hub Standard Collector Service is vulnerable to privilege permission and access control issues...

CVE-2021-25274

The Collector Service in SolarWinds Orion Platform before 2020.2.4 uses MSMQ Microsoft Message Queue and doesn't set permissions on its private queues. As a result, remote unauthenticated clients can send messages to TCP port 1801 that the Collector Service will process. Additionally, upon...

CVE-2021-25274

The Collector Service in SolarWinds Orion Platform before 2020.2.4 uses MSMQ Microsoft Message Queue and doesn't set permissions on its private queues. As a result, remote unauthenticated clients can send messages to TCP port 1801 that the Collector Service will process. Additionally, upon...

Design/Logic Flaw

The Collector Service in SolarWinds Orion Platform before 2020.2.4 uses MSMQ Microsoft Message Queue and doesn't set permissions on its private queues. As a result, remote unauthenticated clients can send messages to TCP port 1801 that the Collector Service will process. Additionally, upon...

CVE-2021-25274

The Collector Service in SolarWinds Orion Platform before 2020.2.4 uses MSMQ Microsoft Message Queue and doesn't set permissions on its private queues. As a result, remote unauthenticated clients can send messages to TCP port 1801 that the Collector Service will process. Additionally, upon...

CVE-2021-25274: Deserialization of Untrusted Data

The Collector Service in SolarWinds Orion Platform before 2020.2.4 uses MSMQ Microsoft Message Queue and doesn't set permissions on its private queues. As a result, remote unauthenticated clients can send messages to TCP port 1801 that the Collector Service will process. Additionally, upon...

PT-2021-16495

Name of the Vulnerable Software and Affected Versions: SolarWinds Orion Platform versions prior to 2020.2.4 Description: The issue concerns the Collector Service in the SolarWinds Orion Platform, which uses Microsoft Message Queue MSMQ and fails to set proper permissions on its private queues. Th...

Solarwinds Orion Platform 代码问题漏洞

Solarwinds Orion Platform is a network fault and network performance management platform from Solarwinds, Inc. The platform provides real-time monitoring and analysis of network devices and supports a customizable web interface, multiple user opinions, and a mapped view of the entire network. A...

The vulnerability of the Diagnostics Hub Standard Collector service in the Visual Studio software allows a hacker to escalate their privileges.

The vulnerability of the Diagnostics Hub Standard Collector service in the Visual Studio software environment is related to deficiencies in access control. Exploiting this vulnerability could allow attackers to enhance their privileges...

Microsoft Diagnostics Hub Standard Collector Service Security Vulnerability

Microsoft Diagnostics Hub Standard Collector Service is a Win32 service from Microsoft USA. It is used to collect real-time ETW events and process them. A security vulnerability exists in Microsoft Diagnostics Hub Standard Collector Service. No information about this vulnerability is available at...

Microsoft Diagnostics Hub Standard Collector Service Control Error Vulnerability

Microsoft Diagnostics Hub Standard Collector Service is a Win32 service from Microsoft USA. It is used to collect real-time ETW events and process them. An access control error vulnerability exists in Microsoft Diagnostics Hub Standard Collector Service. The following products and versions are...

The vulnerability of the Diagnostics Hub Standard Collector Service in the Visual Studio software development environment allows a malicious individual to escalate their privileges.

The vulnerability of the Diagnostics Hub Standard Collector Service in the Visual Studio software development environment is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to enhance their privileges...

PT-2020-4085 · Microsoft · Diagnostics Hub Standard Collector Service +1

Name of the Vulnerable Software and Affected Versions: Diagnostics Hub Standard Collector Service affected versions not specified Description: The issue is related to improper handling of file operations by the Diagnostics Hub Standard Collector, which can lead to elevation of privilege. An...