CVE-2020-0728

Опубликовано: 11 фев. 2020

Источник: nvd

CVSS3: 5.5

CVSS2: 4.9

EPSS Средний

Описание

An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules Installer Service Information Disclosure Vulnerability'.

Ссылки

http://packetstormsecurity.com/files/156394/Microsoft-Windows-Modules-Installer-Service-Information-Disclosure.html
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2020/Feb/16
Mailing List
Third Party Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0728
Patch
Vendor Advisory
https://seclists.org/bugtraq/2020/Feb/21
Mailing List
Third Party Advisory
http://packetstormsecurity.com/files/156394/Microsoft-Windows-Modules-Installer-Service-Information-Disclosure.html
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2020/Feb/16
Mailing List
Third Party Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0728
Patch
Vendor Advisory
https://seclists.org/bugtraq/2020/Feb/21
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_10:1909:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2016:1909:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*

EPSS

Процентиль: 94%

0.13946

Средний

5.5 Medium

CVSS3

4.9 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2020-0728

CVSS3: 3.3

msrc

больше 5 лет назад

Windows Modules Installer Service Information Disclosure Vulnerability

GHSA-235j-2p37-2vfq

github

около 3 лет назад