Skip to content
OpenAdvisories
Medium · 5.3 CVE-2020-0805 EUVD-2020-2292GHSA-w4mr-vhgh-2fq7

Projected Filesystem Security Feature Bypass Vulnerability

Published Sep 11, 2020 · Updated Aug 4, 2024 · Assigned by microsoft

Description

<p>A security feature bypass vulnerability exists when a Windows Projected Filesystem improperly handles file redirections. An attacker who successfully exploited this vulnerability could delete a targeted file they would not have permissions to.</p>
<p>To exploit this vulnerability, an attacker would first have to log on to the system. An attacker could then run a specially crafted application that could exploit the vulnerability.</p>
<p>The security update addresses the vulnerability by correcting how Windows Projected Filesystem handle file redirections.</p>

Affected products

VendorProductAffectedFixed
Microsoft Windows 10 Version 2004 10.0.0 – < publication publication
Microsoft Windows Server version 2004 10.0.0 – < publication publication

References