Vulnerability Description
<p>An elevation of privilege vulnerability exists in Network Watcher Agent virtual machine extension for Linux. An attacker who successfully exploited this vulnerability could execute code with elevated privileges.</p> <p>To exploit this vulnerability, an attacker would have to be present as a user on the affected virtual machine.</p> <p>The security update addresses this vulnerability by correcting how Network Watcher Agent virtual machine extension for Linux executes with elevated privileges.</p>
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Network Watcher Agent | - |
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1699PatchVendor Advisory
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1699PatchVendor Advisory
FAQ
What is CVE-2020-16995?
CVE-2020-16995 is a vulnerability with a CVSS score of 7.8 (HIGH). <p>An elevation of privilege vulnerability exists in Network Watcher Agent virtual machine extension for Linux. An attacker who successfully exploited this vulnerability could execute code with elevat...
How severe is CVE-2020-16995?
CVE-2020-16995 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-16995?
Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Network Watcher Agent.