Описание
OneDrive for Windows Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successfully exploited this vulnerability could overwrite a targeted file with an elevated status.
To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and delete a targeted file with an elevated status.
The update addresses this vulnerability by correcting where the OneDrive updater performs file writes while running with elevation.
FAQ
Do I need to take any action to protect myself from this vulnerability?
Most customers have been protected from this vulnerability because OneDrive has its own updater that periodically checks and updates the OneDrive binary. If your network is air-gapped, you can update the binary from the link in the Security Updates table.
In which situations does this vulnerability apply?
This vulnerability only applies when OneDrive is installed per machine and does not apply to the default per user install. Please see Per Machine Installation for more information.
Which release contains the updates to protect against the vulnerability?
20.170.0824.0001 is the minimum version. The version and all new versions are protected from this vulnerability.
Does 20.201.1005.0006 include the protection for CVE-2020-16853?
Yes, this version does protect against this vulnerability.
Возможность эксплуатации
Publicly Disclosed
Exploited
Latest Software Release
Older Software Release
DOS
EPSS
7.1 High
CVSS3
Связанные уязвимости
<p>An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links. An attacker who successfully exploited this vulnerability could overwrite a targeted file with an elevated status.</p> <p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability and delete a targeted file with an elevated status.</p> <p>The update addresses this vulnerability by correcting where the OneDrive updater performs file writes while running with elevation.</p>
An elevation of privilege vulnerability exists when the OneDrive for Windows Desktop application improperly handles symbolic links, aka 'OneDrive for Windows Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-16851, CVE-2020-16853.
Уязвимость службы размещения файлов OneDrive for Windows, связанная с некорректной обработкой символьных ссылок, позволяющая нарушителю повысить свои привилегии
EPSS
7.1 High
CVSS3