Authorization Bypass

2019-07-0813:27:48

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

21.9%

JSON

powershell is vulnerable to authorization bypass. The vulnerability exists in Windows which will allow the attacker to bypass device guard where an attacker could circumvent a user mode code integrity policy on the machine.

CPENameOperatorVersion
system.management.automationle6.2.0-rc.1
system.management.automationle6.1.2
microsoft.powershell.coreclr.eventingle6.2.0-rc.1
microsoft.powershell.coreclr.eventingle6.1.2
microsoft.powershell.securityle6.1.2
microsoft.powershell.sdkle6.1.2
microsoft.wsman.runtimele6.2.0-rc.1
microsoft.powershell.consolehostle6.2.0
microsoft.powershell.markdownrenderle6.2.0
microsoft.powershell.commands.diagnosticsle6.2.0

Name	Operator	Version
system.management.automation	le	6.2.0-rc.1
system.management.automation	le	6.1.2
microsoft.powershell.coreclr.eventing	le	6.2.0-rc.1
microsoft.powershell.coreclr.eventing	le	6.1.2
microsoft.powershell.security	le	6.1.2
microsoft.powershell.sdk	le	6.1.2
microsoft.wsman.runtime	le	6.2.0-rc.1
microsoft.powershell.consolehost	le	6.2.0
microsoft.powershell.markdownrender	le	6.2.0
microsoft.powershell.commands.diagnostics	le	6.2.0