mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-06-01 11:11:27 +00:00
173 lines
6.0 KiB
JSON
173 lines
6.0 KiB
JSON
{
|
|
"id": "CVE-2024-21412",
|
|
"sourceIdentifier": "secure@microsoft.com",
|
|
"published": "2024-02-13T18:15:59.903",
|
|
"lastModified": "2024-06-11T15:16:02.980",
|
|
"vulnStatus": "Modified",
|
|
"cisaExploitAdd": "2024-02-13",
|
|
"cisaActionDue": "2024-03-05",
|
|
"cisaRequiredAction": "Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",
|
|
"cisaVulnerabilityName": "Microsoft Windows Internet Shortcut Files Security Feature Bypass Vulnerability",
|
|
"descriptions": [
|
|
{
|
|
"lang": "en",
|
|
"value": "Internet Shortcut Files Security Feature Bypass Vulnerability"
|
|
},
|
|
{
|
|
"lang": "es",
|
|
"value": "Vulnerabilidad de omisi\u00f3n de la funci\u00f3n de seguridad de archivos de acceso directo a Internet"
|
|
}
|
|
],
|
|
"metrics": {
|
|
"cvssMetricV31": [
|
|
{
|
|
"source": "secure@microsoft.com",
|
|
"type": "Primary",
|
|
"cvssData": {
|
|
"version": "3.1",
|
|
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
|
|
"attackVector": "NETWORK",
|
|
"attackComplexity": "LOW",
|
|
"privilegesRequired": "NONE",
|
|
"userInteraction": "REQUIRED",
|
|
"scope": "UNCHANGED",
|
|
"confidentialityImpact": "HIGH",
|
|
"integrityImpact": "HIGH",
|
|
"availabilityImpact": "NONE",
|
|
"baseScore": 8.1,
|
|
"baseSeverity": "HIGH"
|
|
},
|
|
"exploitabilityScore": 2.8,
|
|
"impactScore": 5.2
|
|
}
|
|
]
|
|
},
|
|
"weaknesses": [
|
|
{
|
|
"source": "nvd@nist.gov",
|
|
"type": "Primary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "NVD-CWE-noinfo"
|
|
}
|
|
]
|
|
},
|
|
{
|
|
"source": "secure@microsoft.com",
|
|
"type": "Secondary",
|
|
"description": [
|
|
{
|
|
"lang": "en",
|
|
"value": "CWE-693"
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"configurations": [
|
|
{
|
|
"nodes": [
|
|
{
|
|
"operator": "OR",
|
|
"negate": false,
|
|
"cpeMatch": [
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:arm64:*",
|
|
"versionEndExcluding": "10.0.17763.5458",
|
|
"matchCriteriaId": "97FA2666-D83E-4645-AB34-B17DD82A705B"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x64:*",
|
|
"versionEndExcluding": "10.0.17763.5458",
|
|
"matchCriteriaId": "9EF5A993-EF3B-4BE1-8325-62354DD7A7E7"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:x86:*",
|
|
"versionEndExcluding": "10.0.17763.5458",
|
|
"matchCriteriaId": "1957C71A-2CE0-4173-8BB6-0BE0E93E9BCC"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*",
|
|
"versionEndExcluding": "10.0.19044.4046",
|
|
"matchCriteriaId": "C78776CC-3A9C-41A3-8BEB-D71D92F6579D"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:arm64:*",
|
|
"versionEndExcluding": "10.0.19045.4046",
|
|
"matchCriteriaId": "9A6AFF70-FED0-4AF5-9D8F-5C90BF982941"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:x86:*",
|
|
"versionEndExcluding": "10.0.19045.4046",
|
|
"matchCriteriaId": "A0B61E17-FC01-4FF3-BF96-37819033F412"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:arm64:*",
|
|
"versionEndExcluding": "10.0.22000.2777",
|
|
"matchCriteriaId": "481C9CDC-7383-4D08-9608-BDA2F9FADB36"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:x64:*",
|
|
"versionEndExcluding": "10.0.22000.2777",
|
|
"matchCriteriaId": "60E272E2-0D33-4342-92C3-5D66C89DE531"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*",
|
|
"versionEndExcluding": "10.0.22621.3155",
|
|
"matchCriteriaId": "84EDBE52-EFE0-4D6D-AA76-698B6F9687D1"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:arm64:*",
|
|
"versionEndExcluding": "10.0.22631.3155",
|
|
"matchCriteriaId": "E2FB8ADD-663B-445B-B0F2-6B5E168D9E2E"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:x64:*",
|
|
"versionEndExcluding": "10.0.22631.3155",
|
|
"matchCriteriaId": "679CCD68-F014-452C-8D3F-F9D17329779C"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*",
|
|
"versionEndExcluding": "10.0.17763.5458",
|
|
"matchCriteriaId": "A9098F92-79E7-4762-A37C-99B4CFA8CDD1"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*",
|
|
"versionEndExcluding": "10.0.20348.2322",
|
|
"matchCriteriaId": "5C8F0436-3AFE-48BD-AE92-8F8392DD0A1D"
|
|
},
|
|
{
|
|
"vulnerable": true,
|
|
"criteria": "cpe:2.3:o:microsoft:windows_server_2022_23h2:*:*:*:*:*:*:*:*",
|
|
"versionEndExcluding": "10.0.25398.709",
|
|
"matchCriteriaId": "B6FCF1A0-6B8E-457A-AB6A-2DE939B9D18B"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
}
|
|
],
|
|
"references": [
|
|
{
|
|
"url": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-21412",
|
|
"source": "secure@microsoft.com",
|
|
"tags": [
|
|
"Patch",
|
|
"Vendor Advisory"
|
|
]
|
|
}
|
|
]
|
|
} |