CVEvulnerability
CVE-2018-0828
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-02-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-522
Description
Windows 10 version 1607 and Windows Server 2016 allow an elevation of privilege vulnerability due to how the MultiPoint management account password is stored, aka "Windows Elevation of Privilege Vulnerability".
Affected configurations
• microsoft windows 10 1607
• microsoft windows server 2016
Related
Weakness · CWE (1)
- CWE-522 Insufficiently Protected Credentials weakness
References
- http://www.securityfocus.com/bid/102935 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040373 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0828 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/102935 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id/1040373 Third Party Advisory, VDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0828 Patch, Vendor Advisory