CVE-2020-1416
published 2020-07-14CVE-2020-1416: An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Visual…
PriorityP349high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EPSS
5.86%
92.4th percentile
An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability'.
Affected
19 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | azure_storage_explorer | — | — |
| microsoft | microsoft_visual_studio_2017_version_15.9 | — | — |
| microsoft | microsoft_visual_studio_2019 | — | — |
| microsoft | microsoft_visual_studio_2019_version_16.4 | — | — |
| microsoft | microsoft_visual_studio_2019_version_16.6 | — | — |
| microsoft | typescript | — | — |
| microsoft | visual_studio_2017 | >= 15.0 < 15.9.25 | 15.9.25 |
| microsoft | visual_studio_2019 | >= 16.0 < 16.0.16 | 16.0.16 |
| microsoft | visual_studio_2019 | >= 16.1 < 16.4.11 | 16.4.11 |
| microsoft | visual_studio_2019 | >= 16.5 < 16.6.4 | 16.6.4 |
| microsoft | visual_studio_code | < 1.47.1 | 1.47.1 |
| microsoft | visual_studio_code | — | — |
| msrc | azure_storage_explorer | — | — |
| msrc | microsoft_visual_studio_2017_version_15.9 | — | — |
| msrc | microsoft_visual_studio_2019_version_16.0 | — | — |
| msrc | microsoft_visual_studio_2019_version_16.4 | — | — |
| msrc | microsoft_visual_studio_2019_version_16.6 | — | — |
| msrc | typescript | — | — |
| msrc | visual_studio_code | — | — |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.09.3CRITICALAV:N/AC:M/Au:N/C:C/I:C/A:C
vendor_msrc8.8HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-76cm-vv6x-f8wv: An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Vi
ghsa_unreviewed·2022-05-24
CVE-2020-1416 [HIGH] CWE-269 GHSA-76cm-vv6x-f8wv: An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Vi
An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies, aka 'Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability'.
Microsoft
Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability
vendor_msrc·2020-07-14·CVSS 8.8
CVE-2020-1416 [HIGH] Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability
Visual Studio and Visual Studio Code Elevation of Privilege Vulnerability
Description: An elevation of privilege vulnerability exists in Visual Studio and Visual Studio Code when they load software dependencies. A local attacker who successfully exploited the vulnerability could inject arbitrary code to run in the context of the current user. If the current user is logged on with administrative user rights, an attacker could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights.
To exploit this vulnerability, a local attacker would need to plant malicious content on an affected computer and wait for another user to launch Visual Studio or Visual Studio Code.
The update address the vulnerabil
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2020-1925 olingo-odata: Server side request forgery in AsyncResponseWrapperImpl
bugzilla·2020-01-13·CVSS 7.5
CVE-2020-1925 [HIGH] CVE-2020-1925 olingo-odata: Server side request forgery in AsyncResponseWrapperImpl
CVE-2020-1925 olingo-odata: Server side request forgery in AsyncResponseWrapperImpl
Apache Olingo versions 4.0.0 to 4.7.0 provide the AsyncRequestWrapperImpl class which reads a URL from the Location header, and then sends a GET or DELETE request to this URL. It may allow to implement a SSRF attack. If an attacker tricks a client to connect to a malicious server, the server can make the client call any URL including internal resources which are not directly accessible by the attacker.
Upstream issue:
https://issues.apache.org/jira/browse/OLINGO-1416
References:
https://mail-archives.apache.org/mod_mbox/olingo-user/202001.mbox/%3CCAGSZ4d6HwpF2woOrZJg_d0SkHytXJaCtAWXa3ZtBn33WG0YFvw%40mail.gmail.com%3E
Discussion:
This vulnerability is out of security support scope for the following pr
Bugzilla
CVE-2019-15225 envoy: crafted request with long URI allows remote attacker to cause denial of service
bugzilla·2019-10-25·CVSS 7.5
CVE-2019-15225 [HIGH] CVE-2019-15225 envoy: crafted request with long URI allows remote attacker to cause denial of service
CVE-2019-15225 envoy: crafted request with long URI allows remote attacker to cause denial of service
A vulnerability was found in Envoy through 1.11.1, where users may configure a route to match incoming path headers via the libstdc++ regular expression implementation. A remote attacker may send a request with a very long URI to result in a denial of service (memory consumption). This is a related issue to CVE-2019-14993.
This description came from: https://nvd.nist.gov/vuln/detail/CVE-2019-15225
Discussion:
See related flaw https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14993
---
Used FixCVE names as this was released in an RHEA: https://access.redhat.com/errata/RHEA-2020:1416
Bugzilla
CVE-2019-14993 istio/envoy: mishandling regular expressions for long URIs leading to DoS
bugzilla·2019-10-09·CVSS 7.5
CVE-2019-14993 [HIGH] CVE-2019-14993 istio/envoy: mishandling regular expressions for long URIs leading to DoS
CVE-2019-14993 istio/envoy: mishandling regular expressions for long URIs leading to DoS
Istio before 1.1.13 and 1.2.x before 1.2.4 mishandles regular expressions for long URIs, leading to a denial of service during use of the JWT, VirtualService, HTTPAPISpecBinding, or QuotaSpecBinding API.
Upstream Issue:
https://github.com/envoyproxy/envoy/issues/7728
References:
https://istio.io/news/2019/istio-security-003-004/
Discussion:
External References:
https://istio.io/news/2019/istio-security-003-004/
---
Used FixCVE names as this was released in an RHEA: https://access.redhat.com/errata/RHEA-2020:1416
2020-07-14
Published