Skip to content
OpenAdvisories
Medium · 4.1 CVE-2019-1167 EUVD-2019-0577GHSA-5frh-8cmj-gc59

System.Management.Automation subject to bypass via script debugging

Published Jul 19, 2019 · Updated Aug 4, 2024 · Assigned by microsoft

Description

A security feature bypass vulnerability exists in Windows Defender Application Control (WDAC) which could allow an attacker to bypass WDAC enforcement, aka 'Windows Defender Application Control Security Feature Bypass Vulnerability'.

Affected products

VendorProductAffectedFixed
Microsoft PowerShell Core 6.1, 6.2 —

Affected packages

EcosystemPackageAffectedFixedRecord
NuGet System.Management.Automation >= 6.2.0, < 6.2.2 6.2.2 GHSA-5frh-8cmj-gc59
NuGet System.Management.Automation >= 6.1.0, < 6.1.5 6.1.5 GHSA-5frh-8cmj-gc59

References