ID:5770 - Exploit for Information disclosure in Windows and Windows Server - CVE-2019-1125

 
Main Vulnerability Database Exploits ID:5770 - Exploit for Information disclosure in Windows and Windows Server - CVE-2019-1125

ID:5770 - Exploit for Information disclosure in Windows and Windows Server - CVE-2019-1125

Published: June 17, 2021


Vulnerability identifier: #VU19946
Vulnerability risk: Low
CVE-ID: CVE-2019-1125
CWE-ID: CWE-200
Exploitation vector: Local access
Vulnerable software:
Windows
Windows Server

Link to public exploit:


Vulnerability description

The vulnerability allows a local user to gain access to potentially sensitive information and elevate privileges on the system.

The vulnerability exists when certain central processing units (CPU) speculatively access memory. A local user can gain unauthorized access to sensitive information and elevate privileges on the system.

This issue is a variant of the Spectre Variant 1 speculative execution side channel vulnerability that leverages SWAPGS instructions to bypass KPTI/KVA mitigations.


Remediation

Cybersecurity Help is currently unaware of any official solution to address this vulnerability.