説明
Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to gain privileges, cause denial of service, spoof user interface.
Below is a complete list of vulnerabilities:
- An elevation of privilege vulnerability in Diagnostic Hub Standard Collector can be exploited remotely via specially crafted application to gain privileges.
- A denial of service vulnerability in Visual Studio Extension Installer Service can be exploited remotely via specially crafted application to cause denial of service.
- An elevation of privilege vulnerability in Azure DevOps Server and Team Foundation Services can be exploited remotely to gain privileges.
- An elevation of privilege vulnerability in Diagnostics Hub Standard Collector can be exploited remotely to gain privileges.
- A cross-site-scripting (XSS) vulnerability Azure DevOps Server can be exploited remotely via specially crafted payload to spoof user interface.
- A spoofing vulnerability in Microsoft Visual Studio can be exploited remotely to spoof user interface.
- An information disclosure vulnerability in Remote Desktop Connection Manager (RDCMan) can be exploited to obtain sensitive information.
オリジナルアドバイザリー
関連製品
CVEリスト
- CVE-2020-0810 high
- CVE-2020-0789 high
- CVE-2020-0815 high
- CVE-2020-0758 high
- CVE-2020-0793 warning
- CVE-2020-0700 warning
- CVE-2020-0884 warning
- CVE-2020-0765 warning
KBリスト
も参照してください
お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com
この脆弱性についての記述に不正確な点がありますか？ お知らせください！