CVE-2020-0899

5.5MEDIUM

Key Information:

Vendor: Microsoft
Status: Microsoft Visual Studio 2019 Version 16.5; Microsoft Visual Studio 2017 Version 15.9 (includes 15.1 - 15.8); Microsoft Visual Studio 2019; Microsoft Visual Studio 2019 Version 16.4 (includes 16.0 - 16.3)
Vendor: CVE Published:; 15 April 2020

Summary

An elevation of privilege vulnerability exists when Microsoft Visual Studio updater service improperly handles file permissions, aka 'Microsoft Visual Studio Elevation of Privilege Vulnerability'.

Affected Version(s)

Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8) = unspecified

Microsoft Visual Studio 2019 16.0

Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3) = unspecified

References

https://portal.msrc.microsoft.com/en-US/security-guidance...

x_refsource_MISC

CVSS V3.1

Score:

5.5

Severity:

MEDIUM

Confidentiality:

None

Integrity:

High

Availability:

None

Attack Vector:

Local

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Apr 15, 2020
Vulnerability Reserved
Nov 4, 2019

Collectors

NVD DatabaseMitre Database