Main Vulnerability Database Vulnerabilities #VU21669

Permissions, Privileges, and Access Controls in Microsoft Windows and Windows Server - CVE-2019-1321

Published: October 9, 2019

Vulnerability identifier: #VU21669

CSH Severity: Low

CVSS v4: 5.8 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-1321

CWE-ID: CWE-264

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to the way Windows CloudStore handles file Discretionary Access Control List (DACL). A local user can create a malicious application, launch it on the system, overwrite a targeted file leading to an elevated status and take control of an affected system.

To exploit this vulnerability, an attacker would first have to log on to the system.

Affected software

Microsoft Windows
Windows Server

How to mitigate CVE-2019-1321

Install update from vendor's website.

External References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1321

Related Security Bulletins