medium5.5
CVE-2020-0728
An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules Installer Service Inform…
Impact
An information vulnerability exists when Windows Modules Installer Service improperly discloses file information, aka 'Windows Modules Installer Service Information Disclosure Vulnerability'.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Windows 10 | Versions 1607, 1709, 1803, 1809, 1903, 1909 |
| Microsoft | Windows Server 2016 | All versions Versions 1803, 1903, 1909 |
| Microsoft | Windows Server 2019 | All versions |
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/156394/Microsoft-Windows-Modules-Installer-Service-Information-Disclosure.html
- http://seclists.org/fulldisclosure/2020/Feb/16
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0728
- https://seclists.org/bugtraq/2020/Feb/21
- http://packetstormsecurity.com/files/156394/Microsoft-Windows-Modules-Installer-Service-Information-Disclosure.html
- http://seclists.org/fulldisclosure/2020/Feb/16
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0728
- https://seclists.org/bugtraq/2020/Feb/21