2 lines
12 KiB
JSON
2 lines
12 KiB
JSON
{"affected":[{"affectedData":[{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1703","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"10.0.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems","ARM64-based Systems"],"product":"Windows 10 Version 1803","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"10.0.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server, version 1803 (Server Core Installation)","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"10.0.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1809","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["ARM64-based Systems"],"product":"Windows 10 Version 1809","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"10.0.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2019 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"10.0.17763.0","versionType":"custom"}]},{"platforms":["32-bit Systems"],"product":"Windows 10 Version 1709 for 32-bit Systems","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"10.0.0","versionType":"custom"}]},{"platforms":["x64-based Systems","ARM64-based Systems"],"product":"Windows 10 Version 1709","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"10.0.0","versionType":"custom"}]},{"platforms":["Unknown"],"product":"Windows 10 Version 1903 for 32-bit Systems","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"10.0.0","versionType":"custom"}]},{"platforms":["Unknown"],"product":"Windows 10 Version 1903 for x64-based Systems","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"10.0.0","versionType":"custom"}]},{"platforms":["Unknown"],"product":"Windows 10 Version 1903 for ARM64-based Systems","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"10.0.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server, version 1903 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"10.0.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1507","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"10.0.10240.0","versionType":"custom"}]},{"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1607","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"10.0.14393.0","versionType":"custom"}]},{"platforms":["x64-based Systems"],"product":"Windows Server 2016 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"10.0.14393.0","versionType":"custom"}]}],"source":"secure@microsoft.com"},{"affectedData":[{"cpes":["cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"windows_10","vendor":"microsoft","versions":[{"status":"affected","version":"1607"},{"status":"affected","version":"1703"},{"status":"affected","version":"1709"},{"status":"affected","version":"1803"}]},{"cpes":["cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"windows_10","vendor":"microsoft","versions":[{"status":"affected","version":"1607"},{"status":"affected","version":"1703"},{"status":"affected","version":"1709"},{"status":"affected","version":"1803"}]},{"cpes":["cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"windows_10","vendor":"microsoft","versions":[{"status":"affected","version":"1607"},{"status":"affected","version":"1703"},{"status":"affected","version":"1709"},{"status":"affected","version":"1803"}]},{"cpes":["cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"windows_10","vendor":"microsoft","versions":[{"status":"affected","version":"1607"},{"status":"affected","version":"1703"},{"status":"affected","version":"1709"},{"status":"affected","version":"1803"}]},{"cpes":["cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"windows_server_2016","vendor":"microsoft","versions":[{"status":"affected","version":"1803"},{"status":"affected","version":"1903"}]},{"cpes":["cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*","cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"windows_server_2016","vendor":"microsoft","versions":[{"status":"affected","version":"1803"},{"status":"affected","version":"1903"}]},{"cpes":["cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*"],"defaultStatus":"unknown","product":"windows_server_2019","vendor":"microsoft","versions":[{"lessThan":"*","status":"affected","version":"0","versionType":"custom"}]}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"cisaActionDue":"2022-04-05","cisaExploitAdd":"2022-03-15","cisaRequiredAction":"Apply updates per vendor instructions.","cisaVulnerabilityName":"Microsoft Task Scheduler Privilege Escalation Vulnerability","configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:microsoft:windows_10_1507:-:*:*:*:*:*:*:*","matchCriteriaId":"542DAEEC-73CC-46C6-A630-BF474A3446AC","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_1607:-:*:*:*:*:*:*:*","matchCriteriaId":"61019899-D7AF-46E4-A72C-D189180F66AB","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_1703:-:*:*:*:*:*:*:*","matchCriteriaId":"E1DD582C-1660-4E6E-81A1-537BD1307A99","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_1709:-:*:*:*:*:*:*:*","matchCriteriaId":"AC160B20-3EA0-49A0-A857-4E7A1C2D74E2","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_1803:-:*:*:*:*:*:*:*","matchCriteriaId":"00345596-E9E0-4096-8DC6-0212F4747A13","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_1809:-:*:*:*:*:*:*:*","matchCriteriaId":"2E332666-2E03-468E-BC30-299816D6E8ED","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10_1903:-:*:*:*:*:*:*:*","matchCriteriaId":"A363CE8F-F399-4B6E-9E7D-349792F95DDB","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_1803:-:*:*:*:*:*:*:*","matchCriteriaId":"37097C39-D588-4018-B94D-5EB87B1E3D5A","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_1903:-:*:*:*:*:*:*:*","matchCriteriaId":"530DF8C9-467C-4F4F-9FCA-CDD934BADF3C","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*","matchCriteriaId":"041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*","matchCriteriaId":"DB79EE26-FC32-417D-A49C-A1A63165A968","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"An elevation of privilege vulnerability exists in the way the Task Scheduler Service validates certain file operations. An attacker who successfully exploited the vulnerability could gain elevated privileges on a victim system.\nTo exploit the vulnerability, an attacker would require unprivileged code execution on a victim system.\nThe security update addresses the vulnerability by correctly validating file operations."},{"lang":"es","value":"Existe una vulnerabilidad de elevación de privilegios en la manera que Task Scheduler Service valida ciertos operaciones de archivo, conocido como Task Scheduler Elevation of Privilege Vulneraility."}],"id":"CVE-2019-1069","lastModified":"2026-08-12T05:17:22.517","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":7.2,"confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","vectorString":"AV:L/AC:L/Au:N/C:C/I:C/A:C","version":"2.0"},"exploitabilityScore":3.9,"impactScore":10.0,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"secure@microsoft.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2019-1069","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2022-03-14T00:00:00+00:00","version":"2.0.3"}}]},"published":"2019-06-12T14:29:04.337","references":[{"source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"],"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2019-1069"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"],"url":"https://blog.0patch.com/2019/06/another-task-scheduler-0day-another.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1069"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","US Government Resource"],"url":"https://www.kb.cert.org/vuls/id/119704"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2019-1069"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-59"}],"source":"nvd@nist.gov","type":"Primary"},{"description":[{"lang":"en","value":"CWE-59"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}
|