NetSight
medium5.5

CVE-2020-16919

<p>An information disclosure vulnerability exists when the Windows Enterprise App Management Service improperly handles certain file operations.

Impact

<p>An information disclosure vulnerability exists when the Windows Enterprise App Management Service improperly handles certain file operations. An attacker who successfully exploited this vulnerability could read arbitrary files.</p> <p>An attacker with unprivileged access to a vulnerable system could exploit this vulnerability.</p> <p>The security update addresses the vulnerability by ensuring the Windows Enterprise App Management Service properly handles file operations.</p>

Affected products

VendorProductAffected versions
MicrosoftWindows 10
All versions
Versions 1607, 1709, 1803, 1809, 1903
MicrosoftWindows Server 2016
All versions
Versions 1903, 1909, 2004
MicrosoftWindows Server 2019
All versions

References