CVE-2019-0734 Vulnerability Details

  /     /     /  

CVE-2019-0734 Metadata Quick Info

CVE Published: 16/05/2019 | CVE Updated: 04/08/2024 | CVE Year: 2019
Source: microsoft | Vendor: Microsoft | Product: Windows
Status : PUBLISHED

---

CVE-2019-0734 Description

An elevation of privilege vulnerability exists in Microsoft Windows when a man-in-the-middle attacker is able to successfully decode and replace authentication request using Kerberos, allowing an attacker to be validated as an Administrator.The update addresses this vulnerability by changing how these requests are validated., aka \'Windows Elevation of Privilege Vulnerability\'. This CVE ID is unique from CVE-2019-0936.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: Elevation of Privilege
Source: Microsoft

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).