CVE-2019-1253

EUVD-2019-9819 · Published Sep 11, 2019

An elevation of privilege vulnerability exists when the Windows AppX Deployment Server improperly handles junctions.To exploit this vulnerability, an attacker would first have to gain execution on the victim system, aka 'Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2019-1215, CVE-2019-1278, CVE-2019-1303.

Technologies

Microsoft Windows 10 1709Microsoft Windows 10 1803Microsoft Windows Server 1803Microsoft Windows 10 1703Microsoft Windows 10 1809Microsoft Windows Server 1903Microsoft Windows Server 2019Microsoft Windows 10 1903

Weaknesses

CWE-59

CVSS scores

v3.17.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
v2.07.2AV:L/AC:L/Au:N/C:C/I:C/A:C

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Execution Persistence Privilege Escalation Stealth

T1068Exploitation for Privilege Escalation T1027.006HTML Smuggling T1027.009Embedded Payloads T1547.009Shortcut Modification T1564.009Resource Forking T1574.005Executable Installer File Permissions Weakness T1574.010Services File Permissions Weakness

References

Potentially impacted assets

See if this affects your attack surface