CVE-2019-1142

5.5MEDIUM

Key Information:

Vendor: Microsoft
Status: Microsoft .net Framework 4.5.2; Microsoft .net Framework 4.6/4.6.1/4.6.2/4.7/4.7.1/4.7.2; Microsoft .net Framework 4.8 On Windows Server 2012; Microsoft .net Framework 4.8 On Windows Server 2012 (server Core Installation)
Vendor: CVE Published:; 11 September 2019

Summary

An elevation of privilege vulnerability exists when the .NET Framework common language runtime (CLR) allows file creation in arbitrary locations, aka '.NET Framework Elevation of Privilege Vulnerability'.

Affected Version(s)

Microsoft .NET Framework 3.5 Windows Server 2012

Microsoft .NET Framework 3.5 Windows Server 2012 (Server Core installation)

Microsoft .NET Framework 3.5 Windows 8.1 for 32-bit systems

References

https://portal.msrc.microsoft.com/en-US/security-guidance...

x_refsource_MISC

EPSS Score

0% chance of being exploited in the next 30 days.

CVSS V3.1

Score:

5.5

Severity:

MEDIUM

Confidentiality:

None

Integrity:

High

Availability:

None

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Sep 11, 2019
Vulnerability Reserved
Nov 26, 2018

Collectors

NVD DatabaseMitre Database