Microsoft Windows Task Scheduler Security Feature Bypass Vulnerability
Last Update Date:
12 Mar 2015
Release Date:
11 Mar 2015
2867
Views
RISK: Medium Risk
TYPE: Operating Systems - Windows OS
A security feature bypass vulnerability exists when Windows Task Scheduler fails to properly validate and enforce impersonation levels. The vulnerability could allow a user with limited privileges on an affected system to leverage Task Scheduler to execute files that they do not have permissions to run.
Impact
- Security Restriction Bypass
System / Technologies affected
- Windows 7
- Windows Server 2008
- Windows 8 and Windows 8.1
- Windows Server 2012 and Windows Server 2012 R2
- Windows RT and Windows RT 8.1
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- Download location for patches:
https://technet.microsoft.com/en-us/library/security/MS15-028
Vulnerability Identifier
Source
Related Link
Share with