CVE-2019-1142: Path Traversal
Published Sep 11, 2019
·Updated
An elevation of privilege vulnerability exists when the .NET Framework common language runtime (CLR) allows file creation in arbitrary locations, aka '.NET Framework Elevation of Privilege Vulnerability'.
Affected Software
26 affected components
Microsoft .NET Framework=3.5
Microsoft Windows 10
Microsoft Windows 10=1607
Microsoft Windows 10=1703
Microsoft Windows 10=1709
Microsoft Windows 10=1803
Microsoft Windows 8.1
Microsoft Windows Server 2012
Microsoft Windows Server 2012=r2
Microsoft Windows Server 2016
Microsoft .NET Framework=4.7.2
Microsoft Windows 10=1809
Microsoft Windows Server 2019
Microsoft .NET Framework=4.6
Microsoft .NET Framework=4.6.1
Microsoft .NET Framework=4.6.2
Microsoft .NET Framework=4.7
Microsoft .NET Framework=4.7.1
Microsoft Windows RT 8.1
Microsoft .NET Framework=4.8
Microsoft Windows Server 2016=1803
Microsoft Windows 10=1903
Microsoft Windows Server 2016=1903
Microsoft .NET Framework=4.5.2
Microsoft Windows 8.1
Microsoft Windows Server 2012
Remediation
Event History
Sep 11, 2019
CVE Published
via MITRE·09:24 PM
Data Sourced
via MITRE·09:24 PM
DescriptionWeakness
Frequently Asked Questions
1
What is CVE-2019-1142?
CVE-2019-1142 is an elevation of privilege vulnerability in the .NET Framework common language runtime (CLR) that allows file creation in arbitrary locations.
2
What is the severity of CVE-2019-1142?
The severity of CVE-2019-1142 is medium with a CVSS score of 5.5.
3
Which software is affected by CVE-2019-1142?
The Microsoft .NET Framework versions 3.5, 4.6, 4.6.1, 4.6.2, 4.7, 4.7.1, 4.7.2, 4.8, and 4.5.2 are affected by CVE-2019-1142.
4
How can I fix CVE-2019-1142?
To fix CVE-2019-1142, update to the latest version of the affected .NET Framework.
5
Where can I find more information about CVE-2019-1142?
You can find more information about CVE-2019-1142 on the Microsoft Security Guidance Advisory page.