2020-03-12 08:41:02 -07:00
{
2020-03-12 16:01:20 +00:00
"data_type" : "CVE" ,
"data_format" : "MITRE" ,
"data_version" : "4.0" ,
"CVE_data_meta" : {
"ASSIGNER" : "secure@microsoft.com" ,
"ID" : "CVE-2020-0822" ,
"STATE" : "PUBLIC"
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "Windows" ,
"version" : {
"version_data" : [
{
"version_value" : "10 Version 1803 for 32-bit Systems"
} ,
{
"version_value" : "10 Version 1803 for x64-based Systems"
} ,
{
"version_value" : "10 Version 1803 for ARM64-based Systems"
} ,
{
"version_value" : "10 Version 1809 for 32-bit Systems"
} ,
{
"version_value" : "10 Version 1809 for x64-based Systems"
} ,
{
"version_value" : "10 Version 1809 for ARM64-based Systems"
} ,
{
"version_value" : "10 Version 1709 for 32-bit Systems"
} ,
{
"version_value" : "10 Version 1709 for x64-based Systems"
} ,
{
"version_value" : "10 Version 1709 for ARM64-based Systems"
} ,
{
"version_value" : "10 for 32-bit Systems"
} ,
{
"version_value" : "10 for x64-based Systems"
} ,
{
"version_value" : "10 Version 1607 for 32-bit Systems"
} ,
{
"version_value" : "10 Version 1607 for x64-based Systems"
} ,
{
"version_value" : "7 for 32-bit Systems Service Pack 1"
} ,
{
"version_value" : "7 for x64-based Systems Service Pack 1"
} ,
{
"version_value" : "8.1 for 32-bit systems"
} ,
{
"version_value" : "8.1 for x64-based systems"
} ,
{
"version_value" : "RT 8.1"
}
]
}
} ,
{
"product_name" : "Windows Server" ,
"version" : {
"version_data" : [
{
"version_value" : "version 1803 (Core Installation)"
} ,
{
"version_value" : "2019"
} ,
{
"version_value" : "2019 (Core installation)"
} ,
{
"version_value" : "2016"
} ,
{
"version_value" : "2016 (Core installation)"
} ,
{
"version_value" : "2008 for 32-bit Systems Service Pack 2"
} ,
{
"version_value" : "2008 for 32-bit Systems Service Pack 2 (Core installation)"
} ,
{
"version_value" : "2008 for Itanium-Based Systems Service Pack 2"
} ,
{
"version_value" : "2008 for x64-based Systems Service Pack 2"
} ,
{
"version_value" : "2008 for x64-based Systems Service Pack 2 (Core installation)"
} ,
{
"version_value" : "2008 R2 for Itanium-Based Systems Service Pack 1"
} ,
{
"version_value" : "2008 R2 for x64-based Systems Service Pack 1"
} ,
{
"version_value" : "2008 R2 for x64-based Systems Service Pack 1 (Core installation)"
} ,
{
"version_value" : "2012"
} ,
{
"version_value" : "2012 (Core installation)"
} ,
{
"version_value" : "2012 R2"
} ,
{
"version_value" : "2012 R2 (Core installation)"
}
]
}
} ,
{
"product_name" : "Windows 10 Version 1909 for 32-bit Systems" ,
"version" : {
"version_data" : [
{
"version_value" : ""
}
]
}
} ,
{
"product_name" : "Windows 10 Version 1909 for x64-based Systems" ,
"version" : {
"version_data" : [
{
"version_value" : ""
}
]
}
} ,
{
"product_name" : "Windows 10 Version 1909 for ARM64-based Systems" ,
"version" : {
"version_data" : [
{
"version_value" : ""
}
]
}
} ,
{
"product_name" : "Windows Server, version 1909 (Server Core installation)" ,
"version" : {
"version_data" : [
{
"version_value" : ""
}
]
}
} ,
{
"product_name" : "Windows 10 Version 1903 for 32-bit Systems" ,
"version" : {
"version_data" : [
{
"version_value" : ""
}
]
}
} ,
{
"product_name" : "Windows 10 Version 1903 for x64-based Systems" ,
"version" : {
"version_data" : [
{
"version_value" : ""
}
]
}
} ,
{
"product_name" : "Windows 10 Version 1903 for ARM64-based Systems" ,
"version" : {
"version_data" : [
{
"version_value" : ""
}
]
}
} ,
{
"product_name" : "Windows Server, version 1903 (Server Core installation)" ,
"version" : {
"version_data" : [
{
"version_value" : ""
}
]
}
}
]
} ,
"vendor_name" : "Microsoft"
2020-03-12 08:41:02 -07:00
}
]
}
2020-03-12 16:01:20 +00:00
} ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
"value" : "An elevation of privilege vulnerability exists when the Windows Language Pack Installer improperly handles file operations, aka 'Windows Language Pack Installer Elevation of Privilege Vulnerability'."
}
]
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "Elevation of Privilege"
}
]
}
]
} ,
"references" : {
"reference_data" : [
{
"url" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0822" ,
"refsource" : "MISC" ,
"name" : "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0822"
2021-11-09 16:46:54 -08:00
} ,
{
"refsource" : "MLIST" ,
"name" : "[axis-java-dev] 20210228 axis2 1.7.9 is exposed to CVE-2020-8022 via tomcat dependency" ,
"url" : "https://lists.apache.org/thread.html/r5be80ba868a11a1f64e4922399f171b8619bca4bc2039f79cf913928@%3Cjava-dev.axis.apache.org%3E"
} ,
{
"refsource" : "MLIST" ,
"name" : "[axis-java-dev] 20210307 Re: axis2 1.7.9 is exposed to CVE-2020-8022 via tomcat dependency" ,
"url" : "https://lists.apache.org/thread.html/r393d4f431683e99c839b4aed68f720b8583bca6c35cd84adccaa02be@%3Cjava-dev.axis.apache.org%3E"
} ,
{
"refsource" : "MLIST" ,
"name" : "[axis-java-user] 20210419 Re: Axis2 1.8.0 Release timelines" ,
"url" : "https://lists.apache.org/thread.html/r492afeeeb1bfe484f2f4a1f5d296eee49b13eb0c579ac460e3d7d957@%3Cjava-user.axis.apache.org%3E"
} ,
{
"refsource" : "MLIST" ,
"name" : "[axis-java-user] 20210419 RE: Axis2 1.8.0 Release timelines" ,
"url" : "https://lists.apache.org/thread.html/r31d9c450e6d84e82e85c2dd1a7586f56ae4ed6776e5b8765c30fe2ac@%3Cjava-user.axis.apache.org%3E"
} ,
{
"refsource" : "MLIST" ,
"name" : "[axis-java-dev] 20210525 [jira] [Created] (AXIS2-6002) AXIS 2 1.7.9 jars with vulnerability CVE-2020-0822" ,
"url" : "https://lists.apache.org/thread.html/r02687681920bb91816b735cc48847eef77c473a749678d855fbb565d@%3Cjava-dev.axis.apache.org%3E"
} ,
{
"refsource" : "MLIST" ,
"name" : "[axis-java-dev] 20210525 [jira] [Closed] (AXIS2-6002) AXIS 2 1.7.9 jars with vulnerability CVE-2020-0822" ,
"url" : "https://lists.apache.org/thread.html/r258f18d563859c0ef9584fd7341426bd14f5042bdf7e7bc396d91272@%3Cjava-dev.axis.apache.org%3E"
} ,
{
"refsource" : "MLIST" ,
"name" : "[tomcat-dev] 20210823 [Bug 65517] New: upgrade to axis2-adb 1.8.0 to address CVE-2020-0822" ,
"url" : "https://lists.apache.org/thread.html/rf3058e80123e804b74face024752c1ded5213e63011de139f25977bc@%3Cdev.tomcat.apache.org%3E"
} ,
{
"refsource" : "MLIST" ,
"name" : "[tomcat-dev] 20210823 [Bug 65517] upgrade to axis2-adb 1.8.0 to address CVE-2020-0822" ,
"url" : "https://lists.apache.org/thread.html/r6dbbfd80c4b335685e2a561f85013593e7b99934d4cdfc5fc129f4ce@%3Cdev.tomcat.apache.org%3E"
} ,
{
"refsource" : "MLIST" ,
"name" : "[tomcat-dev] 20210915 [Bug 65517] upgrade to axis2-adb 1.8.0 to address CVE-2020-0822" ,
"url" : "https://lists.apache.org/thread.html/reddd31784f5cf8dfb80e473ae1d4f0f28a8367362bd7edaeb2988f86@%3Cdev.tomcat.apache.org%3E"
2020-03-12 16:01:20 +00:00
}
2020-03-12 08:41:02 -07:00
]
2020-03-12 16:01:20 +00:00
}
2021-11-09 16:46:54 -08:00
}
