CVE-2020-1013— Group Policy Elevation of Privilege Vulnerability

Group Policy Elevation of Privilege Vulnerability

<p>An elevation of privilege vulnerability exists when Microsoft Windows processes group policy updates. An attacker who successfully exploited this vulnerability could potentially escalate permissions or perform additional privileged actions on the target machine.</p> <p>To exploit this vulnerability, an attacker would need to launch a man-in-the-middle (MiTM) attack against the traffic passing between a domain controller and the target machine. An attacker could then create a group policy to grant administrator rights to a standard user.</p> <p>The security update addresses the vulnerability by enforcing Kerberos authentication for certain calls over LDAP.</p>

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

N/A

Microsoft Windows 安全漏洞

Microsoft Windows是美国微软（Microsoft）公司的一套个人设备使用的操作系统。DirectX是其中的一个多媒体系统链接库。Language Pack Installer是其中的一个语言包安装程序。 Microsoft Windows存在安全漏洞，该漏洞源于处理组策略更新时，存在特权提升漏洞。攻击者可利用该漏洞在目标计算机上提升特权或执行其他特权操作。以下产品及版本受到影响： Windows 10 1909版本， Windows RT 8.1版本， Windows Server 201

N/A

N/A