Description
<p>An elevation of privilege vulnerability exists in Microsoft Windows when Folder redirection has been enabled via Group Policy. When folder redirection file server is co-located with Terminal server, an attacker who successfully exploited the vulnerability would be able to begin redirecting another user's personal data to a created folder.</p> <p>To exploit the vulnerability, an attacker can create a new folder under the Folder Redirection root path and create a junction on a newly created User folder. When the new user logs in, Folder Redirection would start redirecting to the folder and copying personal data.</p> <p>This elevation of privilege vulnerability can only be addressed by reconfiguring Folder Redirection with Offline files and restricting permissions, and NOT via a security update for affected Windows Servers. See the <strong>FAQ</strong> section of this CVE for configuration guidance.</p>
CVSS breakdown
Affected products
- Microsoft / Windows 10 Version 1507N/A – N/A
- Microsoft / Windows 10 Version 1607N/A – N/A
- Microsoft / Windows 10 Version 1803N/A – N/A
- Microsoft / Windows 10 Version 1809N/A – N/A
- Microsoft / Windows 10 Version 1909N/A – N/A
- Microsoft / Windows 10 Version 2004N/A – N/A
- Microsoft / Windows 10 Version 20H2N/A – N/A
- Microsoft / Windows 7N/A – N/A
- Microsoft / Windows 7 Service Pack 1N/A – N/A
- Microsoft / Windows 8.1N/A – N/A
- Microsoft / Windows Server 2008 R2 Service Pack 1N/A – N/A
- Microsoft / Windows Server 2008 R2 Service Pack 1 (Server Core installation)N/A – N/A
- Microsoft / Windows Server 2008 Service Pack 2N/A – N/A
- Microsoft / Windows Server 2008 Service Pack 2 (Server Core installation)N/A – N/A
- Microsoft / Windows Server 2012
- Microsoft / Windows Server 2012 R2N/A – N/A
- Microsoft / Windows Server 2012 R2 (Server Core installation)N/A – N/A
- Microsoft / Windows Server 2016N/A – N/A
- Microsoft / Windows Server 2016 (Server Core installation)N/A – N/A
- Microsoft / Windows Server 2019N/A – N/A
- Microsoft / Windows Server 2019 (Server Core installation)N/A – N/A
- Microsoft / Windows Server, version 1909 (Server Core installation)N/A – N/A
- Microsoft / Windows Server version 2004N/A – N/A
- Microsoft / Windows Server version 20H2N/A – N/A