virus logo FortiClient Vulnerability

Microsoft Windows Background Intelligent Transfer Service CVE-2020-1255 Elevation of Privilege Vulnerability

description-logoDescription

An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) IIS module improperly handles uploaded content. An attacker who successfully exploited this vulnerability could upload restricted file types to an IIS-hosted folder. To exploit this vulnerability, an attacker would require permissions to upload files via BITS. An attacker could then submit a specially crafted request to upload a file. The security update addresses the vulnerability by correcting how Windows BITS validates file names.

affected-products-logoAffected Applications

Windows RT 8.1
Windows Server version 2004 (Server Core installation)
Windows Server version 1903 (Server Core installation)
Windows Server 2016
Windows Server version 1803 (Server Core Installation)
Windows Server 2012
Windows 8
Windows Server 2008
Windows 10
Windows 7
Windows Server version 1909 (Server Core installation)
Windows Server 2019

CVE References

CVE-2020-1255

Other References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2020-1255
ID 64050
Created Jun 09, 2020
Description
Updated		 Dec 21, 2023
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon lightgray-background-circle-icon
Coverage FortiClient
OS Windows
Vendor Microsoft
Patch auto
Application Windows RT 8.1 , Windows Server version 2004 (Server Core installation) , Windows Server version 1903 (Server Core installation) , Windows Server 2016 , Windows Server version 1803 (Server Core Installation) , Windows Server 2012 , Windows 8 , Windows Server 2008 , Windows 10 , Windows 7 , Windows Server version 1909 (Server Core installation) , Windows Server 2019