CVE Vulnerabilities

CVE-2019-1385

Improper Link Resolution Before File Access ('Link Following')

Published: Nov 12, 2019 | Modified: Apr 08, 2025
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
6.1 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:C
RedHat/V2
RedHat/V3
Ubuntu

An elevation of privilege vulnerability exists when the Windows AppX Deployment Extensions improperly performs privilege management, resulting in access to system files.To exploit this vulnerability, an authenticated attacker would need to run a specially crafted application to elevate privileges.The security update addresses the vulnerability by correcting how AppX Deployment Extensions manages privileges., aka Windows AppX Deployment Extensions Elevation of Privilege Vulnerability.

Weakness 

The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.

Affected Software 

Name Vendor Start Version End Version
Windows_10_1709 Microsoft - (including) - (including)
Windows_10_1803 Microsoft - (including) - (including)
Windows_10_1809 Microsoft - (including) - (including)
Windows_10_1903 Microsoft - (including) - (including)
Windows_server_2016 Microsoft - (including) - (including)
Windows_server_2019 Microsoft - (including) - (including)

Potential Mitigations 

  • Follow the principle of least privilege when assigning access rights to entities in a software system.
  • Denying access to a file can prevent an attacker from replacing that file with a link to a sensitive file. Ensure good compartmentalization in the system to provide protected areas that can be trusted.

References