Skip to main content
← All vulnerabilities
CVE-2020-16919

Windows Enterprise App Management Service Information Disclosure Vulnerability

Published
Last modified
published
Not listed in CISA KEV
None on Exploit-DB, Metasploit or GitHub

Summary

<p>An information disclosure vulnerability exists when the Windows Enterprise App Management Service improperly handles certain file operations. An attacker who successfully exploited this vulnerability could read arbitrary files.</p> <p>An attacker with unprivileged access to a vulnerable system could exploit this vulnerability.</p> <p>The security update addresses the vulnerability by ensuring the Windows Enterprise App Management Service properly handles file operations.</p>

Timeline

  1. CVE published
  2. Record last updated

Affected versions

  • Microsoft Windows 10 Version 1803

    From 10.0.0

  • Microsoft Windows 10 Version 1809

    From 10.0.0

  • Microsoft Windows Server 2019

    From 10.0.0

  • Microsoft Windows Server 2019 (Server Core installation)

    From 10.0.0

  • Microsoft Windows 10 Version 1909

    From 10.0.0

  • Microsoft Windows Server, version 1909 (Server Core installation)

    From 10.0.0

  • Microsoft Windows 10 Version 1709 for 32-bit Systems

    From 10.0.0

  • Microsoft Windows 10 Version 1709

    From 10.0.0

  • Microsoft Windows 10 Version 1903 for 32-bit Systems

    From 10.0.0

  • Microsoft Windows 10 Version 1903 for x64-based Systems

    From 10.0.0

  • Microsoft Windows 10 Version 1903 for ARM64-based Systems

    From 10.0.0

  • Microsoft Windows Server, version 1903 (Server Core installation)

    From 10.0.0

  • Microsoft Windows 10 Version 2004

    From 10.0.0

  • Microsoft Windows Server version 2004

    From 10.0.0

  • Microsoft Windows 10 Version 1507

    From 10.0.0

  • Microsoft Windows 10 Version 1607

    From 10.0.0

  • Microsoft Windows Server 2016

    From 10.0.0

  • Microsoft Windows Server 2016 (Server Core installation)

    From 10.0.0

References 1

portal.msrc.microsoft.com