SB2020060947 - Security Feature bypass in Microsoft Windows Host Guardian Service
Published: June 9, 2020
Security Bulletin ID
SB2020060947
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Information disclosure
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Security Features (CVE-ID: CVE-2020-1259)
This vulnerability allows a remote attacker to bypass security rescritions feature.
The vulnerability exists due to the Windows Host Guardian Service improperly handles hashes recorded and logged. A remote authenticated attacker can change existing event log types to a type the parsers do not interpret and append their own hash without triggering an alert.
Remediation
Install update from vendor's website.