Fortinet Discovers Microsoft Windows Storage Service Elevation of Privilege Vulnerability
Fortinet's FortiGuard Labs has discovered a local privilege escalation vulnerability in Microsoft Storage Services.
Microsoft Storage Service is a remote procedure call (RPC) service that provides enabling services for storage settings and external storage expansion.
The local elevation of privilege happens when an attacker creates bogus symbolic link for predictable files and folders created by Storage Services that allows unprivileged users overwrite discretionary access control of escalated files.
SolutionsFortiGuard Labs released the following FortiGate IPS signature which covers this specific vulnerability:
Released Jan 08, 2019
Users should apply the solution provided by Microsoft.
Fortinet reported the vulnerability to Microsoft on October 15, 2018.
Microsoft confirmed the vulnerability on November 11, 2018.
Microsoft patched the vulnerability on February 13, 2018.
This vulnerability was discovered by Wayne Low of Fortinet's FortiGuard Labs.