ID

VAR-201903-1508


CVE

CVE-2019-0632


TITLE

plural Microsoft Windows Vulnerabilities that bypass security functions in products

Trust: 0.8

sources: JVNDB: JVNDB-2019-002158

DESCRIPTION

A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka 'Windows Security Feature Bypass Vulnerability'. This CVE ID is unique from CVE-2019-0627, CVE-2019-0631. An attacker can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks

Trust: 1.89

sources: NVD: CVE-2019-0632 // JVNDB: JVNDB-2019-002158 // BID: 106880

AFFECTED PRODUCTS

vendor:microsoftmodel:powershell corescope:eqversion:6.2

Trust: 2.1

vendor:microsoftmodel:powershell corescope:eqversion:6.1

Trust: 2.1

vendor:microsoftmodel:windows server 2016scope:eqversion:1803

Trust: 1.0

vendor:microsoftmodel:windows server 2019scope:eqversion: -

Trust: 1.0

vendor:microsoftmodel:windows 10scope:eqversion:1607

Trust: 1.0

vendor:microsoftmodel:windows server 2016scope:eqversion:1709

Trust: 1.0

vendor:microsoftmodel:windows 10scope:eqversion:1709

Trust: 1.0

vendor:microsoftmodel:windows server 2016scope:eqversion: -

Trust: 1.0

vendor:microsoftmodel:windows 10scope:eqversion: -

Trust: 1.0

vendor:microsoftmodel:windows 10scope:eqversion:1809

Trust: 1.0

vendor:microsoftmodel:windows 10scope:eqversion:1703

Trust: 1.0

vendor:microsoftmodel:windows 10scope:eqversion:1803

Trust: 1.0

vendor:microsoftmodel:windows 10scope:eqversion:for 32-bit systems

Trust: 0.8

vendor:microsoftmodel:windows 10scope:eqversion:for x64-based systems

Trust: 0.8

vendor:microsoftmodel:windows 10scope:eqversion:version 1607 for 32-bit systems

Trust: 0.8

vendor:microsoftmodel:windows 10scope:eqversion:version 1607 for x64-based systems

Trust: 0.8

vendor:microsoftmodel:windows 10scope:eqversion:version 1703 for 32-bit systems

Trust: 0.8

vendor:microsoftmodel:windows 10scope:eqversion:version 1703 for x64-based systems

Trust: 0.8

vendor:microsoftmodel:windows 10scope:eqversion:version 1709 for 32-bit systems

Trust: 0.8

vendor:microsoftmodel:windows 10scope:eqversion:version 1709 for 64-based systems

Trust: 0.8

vendor:microsoftmodel:windows 10scope:eqversion:version 1709 for arm64-based systems

Trust: 0.8

vendor:microsoftmodel:windows 10scope:eqversion:version 1803 for 32-bit systems

Trust: 0.8

vendor:microsoftmodel:windows 10scope:eqversion:version 1803 for arm64-based systems

Trust: 0.8

vendor:microsoftmodel:windows 10scope:eqversion:version 1803 for x64-based systems

Trust: 0.8

vendor:microsoftmodel:windows 10scope:eqversion:version 1809 for 32-bit systems

Trust: 0.8

vendor:microsoftmodel:windows 10scope:eqversion:version 1809 for arm64-based systems

Trust: 0.8

vendor:microsoftmodel:windows 10scope:eqversion:version 1809 for x64-based systems

Trust: 0.8

vendor:microsoftmodel:windows serverscope:eqversion:version 1709 (server core installation)

Trust: 0.8

vendor:microsoftmodel:windows serverscope:eqversion:version 1803 (server core installation)

Trust: 0.8

vendor:microsoftmodel:windows server 2016scope:eqversion:none

Trust: 0.8

vendor:microsoftmodel:windows server 2016scope:eqversion:(server core installation)

Trust: 0.8

vendor:microsoftmodel:windows server 2019scope:eqversion:none

Trust: 0.8

vendor:microsoftmodel:windows server 2019scope:eqversion:(server core installation)

Trust: 0.8

vendor:microsoftmodel:windows serverscope:eqversion:20190

Trust: 0.3

vendor:microsoftmodel:windows serverscope:eqversion:20160

Trust: 0.3

vendor:microsoftmodel:windows serverscope:eqversion:18030

Trust: 0.3

vendor:microsoftmodel:windows serverscope:eqversion:17090

Trust: 0.3

vendor:microsoftmodel:windows version for x64-based systemsscope:eqversion:1018090

Trust: 0.3

vendor:microsoftmodel:windows version for arm64-based systemsscope:eqversion:1018090

Trust: 0.3

vendor:microsoftmodel:windows version for 32-bit systemsscope:eqversion:1018090

Trust: 0.3

vendor:microsoftmodel:windows version for x64-based systemsscope:eqversion:1018030

Trust: 0.3

vendor:microsoftmodel:windows version for arm64-based systemsscope:eqversion:1018030

Trust: 0.3

vendor:microsoftmodel:windows version for 32-bit systemsscope:eqversion:1018030

Trust: 0.3

vendor:microsoftmodel:windows version for x64-based systemsscope:eqversion:1017090

Trust: 0.3

vendor:microsoftmodel:windows version for arm64-based systemsscope:eqversion:1017090

Trust: 0.3

vendor:microsoftmodel:windows version for 32-bit systemsscope:eqversion:1017090

Trust: 0.3

vendor:microsoftmodel:windows version for x64-based systemsscope:eqversion:1017030

Trust: 0.3

vendor:microsoftmodel:windows version for 32-bit systemsscope:eqversion:1017030

Trust: 0.3

vendor:microsoftmodel:windows version for x64-based systemsscope:eqversion:1016070

Trust: 0.3

vendor:microsoftmodel:windows version for 32-bit systemsscope:eqversion:1016070

Trust: 0.3

vendor:microsoftmodel:windows for x64-based systemsscope:eqversion:100

Trust: 0.3

vendor:microsoftmodel:windows for 32-bit systemsscope:eqversion:100

Trust: 0.3

sources: BID: 106880 // JVNDB: JVNDB-2019-002158 // NVD: CVE-2019-0632

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2019-0632
value: HIGH

Trust: 1.0

NVD: CVE-2019-0632
value: HIGH

Trust: 0.8

CNNVD: CNNVD-201902-364
value: HIGH

Trust: 0.6

nvd@nist.gov: CVE-2019-0632
severity: MEDIUM
baseScore: 4.6
vectorString: AV:L/AC:L/AU:N/C:P/I:P/A:P
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 3.9
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

nvd@nist.gov: CVE-2019-0632
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 5.9
version: 3.0

Trust: 1.8

sources: JVNDB: JVNDB-2019-002158 // CNNVD: CNNVD-201902-364 // NVD: CVE-2019-0632

PROBLEMTYPE DATA

problemtype:NVD-CWE-noinfo

Trust: 1.0

problemtype:CWE-264

Trust: 0.8

sources: JVNDB: JVNDB-2019-002158 // NVD: CVE-2019-0632

THREAT TYPE

local

Trust: 0.9

sources: BID: 106880 // CNNVD: CNNVD-201902-364

TYPE

permissions and access control

Trust: 0.6

sources: CNNVD: CNNVD-201902-364

CONFIGURATIONS

sources: JVNDB: JVNDB-2019-002158

PATCH

title:CVE-2019-0632 | Windows Security Feature Bypass Vulnerabilityurl:https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0632

Trust: 0.8

title:CVE-2019-0632 | Windows のセキュリティ機能のバイパスの脆弱性url:https://portal.msrc.microsoft.com/ja-JP/security-guidance/advisory/CVE-2019-0632

Trust: 0.8

title:Microsoft Windows Security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=89178

Trust: 0.6

sources: JVNDB: JVNDB-2019-002158 // CNNVD: CNNVD-201902-364

EXTERNAL IDS

db:NVDid:CVE-2019-0632

Trust: 2.7

db:BIDid:106880

Trust: 1.9

db:JVNDBid:JVNDB-2019-002158

Trust: 0.8

db:CNNVDid:CNNVD-201902-364

Trust: 0.6

sources: BID: 106880 // JVNDB: JVNDB-2019-002158 // CNNVD: CNNVD-201902-364 // NVD: CVE-2019-0632

REFERENCES

url:http://www.securityfocus.com/bid/106880

Trust: 2.2

url:https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/cve-2019-0632

Trust: 1.9

url:https://nvd.nist.gov/vuln/detail/cve-2019-0632

Trust: 1.4

url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-cve-2019-0632

Trust: 0.8

url:https://www.ipa.go.jp/security/ciadr/vul/20190213-ms.html

Trust: 0.8

url:http://www.jpcert.or.jp/at/2019/at190006.html

Trust: 0.8

url:https://github.com/powershell/announcements/issues/13

Trust: 0.3

url:http://www.microsoft.com

Trust: 0.3

sources: BID: 106880 // JVNDB: JVNDB-2019-002158 // CNNVD: CNNVD-201902-364 // NVD: CVE-2019-0632

CREDITS

Matt Graeber from SpecterOps.

Trust: 0.9

sources: BID: 106880 // CNNVD: CNNVD-201902-364

SOURCES

db:BIDid:106880
db:JVNDBid:JVNDB-2019-002158
db:CNNVDid:CNNVD-201902-364
db:NVDid:CVE-2019-0632

LAST UPDATE DATE

2024-08-14T14:45:26.738000+00:00


SOURCES UPDATE DATE

db:BIDid:106880date:2019-02-21T05:00:00
db:JVNDBid:JVNDB-2019-002158date:2019-04-03T00:00:00
db:CNNVDid:CNNVD-201902-364date:2020-08-25T00:00:00
db:NVDid:CVE-2019-0632date:2020-08-24T17:37:01.140

SOURCES RELEASE DATE

db:BIDid:106880date:2019-02-12T00:00:00
db:JVNDBid:JVNDB-2019-002158date:2019-04-03T00:00:00
db:CNNVDid:CNNVD-201902-364date:2019-02-12T00:00:00
db:NVDid:CVE-2019-0632date:2019-03-05T23:29:01.350