Microsoft Windows Service Unknown information disclosure

Summaryinfo

A vulnerability classified as problematic was found in Microsoft Windows. The impacted element is an unknown function of the component Service. Such manipulation leads to information disclosure (Unknown). No exploit exists. Configuration settings should be changed.

Detailsinfo

A vulnerability was found in Microsoft Windows (Operating System) (version unknown). It has been rated as problematic. Affected by this issue is an unknown function of the component Service. The manipulation with an unknown input leads to a information disclosure vulnerability (Unknown). Using CWE to declare the problem leads to CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. Impacted is confidentiality.

The weakness was disclosed 01/01/1999. The exploitation is known to be easy. The attack may be launched remotely. No form of authentication is required for exploitation. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1592.

It is possible to mitigate the problem by applying the configuration setting .

The vulnerability is also documented in the databases at X-Force (185) and Vulnerability Center (SBV-982†). The entries VDB-88176, VDB-88174, VDB-88173 and VDB-88171 are pretty similar. Once again VulDB remains the best source for vulnerability data.

Productinfo

Type

• Operating System

Vendor

• Microsoft

Name

• Windows

License

• commercial

Website

• Vendor: https://www.microsoft.com/
• Product: https://www.microsoft.com/en-us/windows

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion