Files
vuln-nvd/data/2020/CVE-2020-1130.json
T

2 lines
12 KiB
JSON
Raw Blame History

This file contains ambiguous Unicode characters
This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.
{"affected":[{"affectedData":[{"cpes":["cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*","cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:x64:*","cpe:2.3:o:microsoft:windows_10_1803:*:*:*:*:*:*:arm64:*"],"platforms":["32-bit Systems","x64-based Systems","ARM64-based Systems"],"product":"Windows 10 Version 1803","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"10.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*","cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*","cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*"],"platforms":["32-bit Systems","x64-based Systems","ARM64-based Systems"],"product":"Windows 10 Version 1809","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"10.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*"],"platforms":["x64-based Systems"],"product":"Windows Server 2019","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"10.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*"],"platforms":["x64-based Systems"],"product":"Windows Server 2019 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"10.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x86:*","cpe:2.3:o:microsoft:windows_10_1909:*:*:*:*:*:*:x64:*","cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*"],"platforms":["32-bit Systems","x64-based Systems","ARM64-based Systems"],"product":"Windows 10 Version 1909","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"10.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:microsoft:windows_server_1909:*:*:*:*:*:*:*:*"],"platforms":["x64-based Systems"],"product":"Windows Server, version 1909 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"10.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*"],"platforms":["32-bit Systems"],"product":"Windows 10 Version 1709 for 32-bit Systems","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"10.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*"],"platforms":["x64-based Systems","ARM64-based Systems"],"product":"Windows 10 Version 1709","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"10.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*"],"platforms":["Unknown"],"product":"Windows 10 Version 1903 for 32-bit Systems","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"10.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*"],"platforms":["Unknown"],"product":"Windows 10 Version 1903 for x64-based Systems","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"10.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*"],"platforms":["Unknown"],"product":"Windows 10 Version 1903 for ARM64-based Systems","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"10.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:microsoft:windows_server_1903:*:*:*:*:*:*:*:*"],"platforms":["x64-based Systems"],"product":"Windows Server, version 1903 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"10.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*"],"platforms":["32-bit Systems","ARM64-based Systems","x64-based Systems"],"product":"Windows 10 Version 2004","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"10.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:microsoft:windows_server_2004:*:*:*:*:*:*:*:*"],"platforms":["x64-based Systems"],"product":"Windows Server version 2004","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"10.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x86:*","cpe:2.3:o:microsoft:windows_10_1507:*:*:*:*:*:*:x64:*"],"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1507","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"10.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x86:*","cpe:2.3:o:microsoft:windows_10_1607:*:*:*:*:*:*:x64:*"],"platforms":["32-bit Systems","x64-based Systems"],"product":"Windows 10 Version 1607","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"10.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*"],"platforms":["x64-based Systems"],"product":"Windows Server 2016","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"10.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:o:microsoft:windows_server_2016:*:*:*:*:*:*:*:*"],"platforms":["x64-based Systems"],"product":"Windows Server 2016 (Server Core installation)","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"10.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*"],"platforms":["Unknown"],"product":"Microsoft Visual Studio 2019 version 16.7 (includes 16.0 – 16.6)","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"16.0.0","versionType":"custom"}]},{"cpes":["cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*"],"platforms":["Unknown"],"product":"Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"15.9.0","versionType":"custom"}]},{"cpes":["cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*"],"platforms":["Unknown"],"product":"Microsoft Visual Studio 2019 version 16.0","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"16.0","versionType":"custom"}]},{"cpes":["cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*"],"platforms":["Unknown"],"product":"Microsoft Visual Studio 2019 version 16.4 (includes 16.0 - 16.3)","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"16.0","versionType":"custom"}]},{"cpes":["cpe:2.3:a:microsoft:visual_studio:2015:update3:*:*:*:*:*:*"],"platforms":["Unknown"],"product":"Microsoft Visual Studio 2015 Update 3","vendor":"Microsoft","versions":[{"lessThan":"publication","status":"affected","version":"14.0.0","versionType":"custom"}]}],"source":"secure@microsoft.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:microsoft:visual_studio:2015:update3:*:*:*:*:*:*","matchCriteriaId":"62FE95C2-066B-491D-82BF-3EF173822B2F","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*","matchCriteriaId":"D24A94DC-945C-42E3-91FD-CB0B541D8C51","versionEndExcluding":"15.9.27","versionStartIncluding":"15.0","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*","matchCriteriaId":"38E37F70-BFA4-40AF-AFB5-E0771CD1426E","versionEndExcluding":"16.4.13","versionStartIncluding":"16.0","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*","matchCriteriaId":"774D798B-0012-4174-AB23-514260463404","versionEndExcluding":"16.7.3","versionStartIncluding":"16.5","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*","matchCriteriaId":"21540673-614A-4D40-8BD7-3F07723803B0","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*","matchCriteriaId":"E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*","matchCriteriaId":"83B14968-3985-43C3-ACE5-8307196EFAE3","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*","matchCriteriaId":"7CB85C75-4D35-480E-843D-60579EC75FCB","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*","matchCriteriaId":"6B8F3DD2-A145-4AF1-8545-CC42892DA3D1","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*","matchCriteriaId":"3FB5CDAE-C713-4D9D-9D6A-2C2E8924A4BB","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*","matchCriteriaId":"E9273B95-20ED-4547-B0A8-95AD15B30372","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_10:2004:*:*:*:*:*:*:*","matchCriteriaId":"AAE74AF3-C559-4645-A6C0-25C3D647AAC8","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*","matchCriteriaId":"041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*","matchCriteriaId":"5B921FDB-8E7D-427E-82BE-4432585080CF","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*","matchCriteriaId":"C253A63F-03AB-41CB-A03A-B2674DEA98AA","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2016:2004:*:*:*:*:*:*:*","matchCriteriaId":"0B60D940-80C7-49F0-8F4E-3F99AC15FA82","vulnerable":true},{"criteria":"cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*","matchCriteriaId":"DB79EE26-FC32-417D-A49C-A1A63165A968","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"<p>An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector improperly handles data operations. An attacker who successfully exploited this vulnerability could run processes in an elevated context.</p>\n<p>An attacker could exploit this vulnerability by running a specially crafted application on the victim system.</p>\n<p>The update addresses the vulnerability by correcting the way the Diagnostics Hub Standard Collector handles data operations.</p>"},{"lang":"es","value":"Se presenta una vulnerabilidad de escalada de privilegios cuando el Diagnostics Hub Standard Collector maneja inapropiadamente las operaciones de datos, también se conoce como \"Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability\".&#xa0;Este ID de CVE es diferente de CVE-2020-1133"}],"id":"CVE-2020-1130","lastModified":"2026-06-17T03:00:32.300","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"MEDIUM","cvssData":{"accessComplexity":"LOW","accessVector":"LOCAL","authentication":"NONE","availabilityImpact":"PARTIAL","baseScore":4.6,"confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","vectorString":"AV:L/AC:L/Au:N/C:P/I:P/A:P","version":"2.0"},"exploitabilityScore":3.9,"impactScore":6.4,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":false}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"LOW","baseScore":6.6,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L","version":"3.1"},"exploitabilityScore":1.8,"impactScore":4.7,"source":"secure@microsoft.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Secondary"}]},"published":"2020-09-11T17:15:19.043","references":[{"source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1130"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1130"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"}]}