Microsoft Management Console (MMC) Vulnerabilities

guest · Jun 18, 2019

Microsoft Management Console (MMC) Vulnerabilities
June 11, 2019
https://research.checkpoint.com/microsoft-management-console-mmc-vulnerabilities/

The goal of Microsoft Management Console (MMC) is to provide a programming platform for creating and hosting applications that manage Microsoft Windows-based environment, and to provide a simple, consistent and integrated management user interface and administration model.

Recently, Check Point Research discovered several vulnerabilities in the console that would allow an attacker to deliver a malicious payload.
Microsoft has granted CVE-2019-0948 to this vulnerability and patched it in their June 11th Patch Tuesday release.
Vulnerability Description:
1) Multiple XSS vulnerabilities due to misconfigured WebView.
2) XXE Vulnerability due to misconfigured XML parser.
Proof of Concept [...]
Click to expand...

Log in or Sign up

Microsoft Management Console (MMC) Vulnerabilities

guest Guest

Log in or Sign up

Microsoft Management Console (MMC) Vulnerabilities

guest Guest

Useful Searches