CVE-2020-0787

Description

An elevation of privilege vulnerability exists when the Windows Background Intelligent Transfer Service (BITS) improperly handles symbolic links, aka 'Windows Background Intelligent Transfer Service Elevation of Privilege Vulnerability'.

References

https://www.cisa.gov/news-events/cybersecurity-advisories/aa24-242a

https://www.tenable.com/blog/analyzing-the-vulnerabilities-associated-with-the-top-malware-strains-of-2021

https://www.tenable.com/cyber-exposure/a-look-inside-the-ransomware-ecosystem

https://unit42.paloaltonetworks.com/lockbit-2-ransomware/

https://www.tenable.com/blog/contileaks-chats-reveal-over-30-vulnerabilities-used-by-conti-ransomware-affiliates

https://www.tenable.com/blog/examining-the-treat-landscape

https://www.cisa.gov/news-events/cybersecurity-advisories/aa21-209a

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0787

http://packetstormsecurity.com/files/158056/Background-Intelligent-Transfer-Service-Privilege-Escalation.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3