Information disclosure

Windows Update Orchestrator Service Information Disclosure Vulnerability...

CVE-2023-32041

CVE-2023-32041 concerns a Windows Update Orchestrator Service information disclosure vulnerability. The provided documents do not include concrete technical details (affected products/versions, root cause, exploitability, or fixes). Monitor for updates.

PT-2023-3814 · Microsoft · Windows Update Orchestrator Service +1

Name of the Vulnerable Software and Affected Versions: Windows Update Orchestrator Service affected versions not specified Description: The issue is related to an information disclosure vulnerability in the Windows Update Orchestrator Service of the Windows operating system. This vulnerability ca...

CVE-2022-43524

A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an authenticated remote attacker to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit allows an attacker to execute...

Measuresoft ScadaPro Server Improper Access Control Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Measuresoft ScadaPro Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

Information Disclosure

bolt is vulnerable to information disclosure. The vulnerability exists in the startplan function in connection.rb due to submitting sensitive parameter values to the orchestrator service when running plans over the PCP transport which allows an attacker to gain access to sensitive information...

The vulnerability of the Windows Update Orchestrator Service component on the Windows operating system, which allows a malicious individual to escalate their privileges

The vulnerability of the Windows Update Orchestrator Service component in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Windows Update Orchestrator Service on Windows operating systems allows a malicious individual to gain increased privileges.

The vulnerability of the Windows Update Orchestrator Service on Windows operating systems is related to security configuration errors. Exploiting this vulnerability can allow attackers to gain increased privileges...

CVE-2020-17074

Windows Update Orchestrator Service Elevation of Privilege Vulnerability...

CVE-2020-17076

Windows Update Orchestrator Service Elevation of Privilege Vulnerability...

CVE-2020-17073

Windows Update Orchestrator Service Elevation of Privilege Vulnerability...

Privilege escalation

Windows Update Orchestrator Service Elevation of Privilege Vulnerability...

CVE-2020-17076 Windows Update Orchestrator Service Elevation of Privilege Vulnerability

...

CVE-2020-17074 Windows Update Orchestrator Service Elevation of Privilege Vulnerability

...

CVE-2020-17073

CVE-2020-17073 corresponds to a Windows Update Orchestrator Service Elevation of Privilege vulnerability. The connected KLA12004 advisory explicitly lists an elevation of privilege vulnerability in Windows Update Orchestrator Service (item 34) among a broad set of Windows kernel and subsystem vul...

Windows Update Orchestrator Service Elevation of Privilege Vulnerability

...

PT-2020-4825 · Microsoft · Windows Update Orchestrator Service +1

Name of the Vulnerable Software and Affected Versions: Windows Update Orchestrator Service affected versions not specified Description: The issue is related to insufficient access control in the Windows Update Orchestrator Service component of the Windows operating system. Exploitation of this...

The vulnerability of the Update Orchestrator Service for Windows operating systems allows a perpetrator to escalate their privileges and execute arbitrary code.

The vulnerability of the Update Orchestrator Service service for Windows operating systems is related to improper handling of file operations. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code using a specially created application...

UsoDllLoader - Windows - Weaponizing Privileged File Writes With The Update Session Orchestrator Service

2020-06-06 Update: this trick no longer works on the latest builds of Windows 10 Insider Preview. This means that, although it still works on the mainstream version ofWindows 10, you should expect it to be patched in the coming months. Description This PoC shows a technique that can be used to...

Background Intelligent Transfer Service Privilege Escalation Exploit

This Metasploit module exploits CVE-2020-0787, an arbitrary file move vulnerability in outdated versions of the Background Intelligent Transfer Service BITS, to overwrite C:\Windows\System32\WindowsCoreDeviceInfo.dll with a malicious DLL containing the attacker's payload. To achieve code executio...