description: An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector or the Visual Studio Standard Collector allows file deletion in arbitrary locations.To exploit the vulnerability, an attacker would first have to log on to the system, aka 'Diagnostic Hub Standard Collector, Visual Studio Standard Collector Elevation of Privilege Vulnerability'.
problem types: Elevation of Privilege
affected:
{
product: Microsoft Visual Studio
vendor: Microsoft
versions:
status: affected, version: 2015 Update 3
}
{
product: Windows
vendor: Microsoft
versions:
status: affected, version: 10 for 32-bit Systems
status: affected, version: 10 for x64-based Systems
status: affected, version: 10 Version 1607 for 32-bit Systems
status: affected, version: 10 Version 1607 for x64-based Systems
status: affected, version: 10 Version 1703 for 32-bit Systems
status: affected, version: 10 Version 1703 for x64-based Systems
status: affected, version: 10 Version 1709 for 32-bit Systems
status: affected, version: 10 Version 1709 for x64-based Systems
status: affected, version: 10 Version 1803 for 32-bit Systems
status: affected, version: 10 Version 1803 for x64-based Systems
status: affected, version: 10 Version 1803 for ARM64-based Systems
status: affected, version: 10 Version 1809 for 32-bit Systems
status: affected, version: 10 Version 1809 for x64-based Systems
status: affected, version: 10 Version 1809 for ARM64-based Systems
status: affected, version: 10 Version 1709 for ARM64-based Systems
}
{
product: Windows Server
vendor: Microsoft
versions:
status: affected, version: 2016
status: affected, version: 2016  (Core installation)
status: affected, version: version 1803  (Core Installation)
status: affected, version: 2019
status: affected, version: 2019  (Core installation)
}
{
product: Microsoft Visual Studio 2017
vendor: Microsoft
versions:
status: affected, version: version 15.9
status: affected, version: 15.0
}
{
product: Windows 10 Version 1903 for 32-bit Systems
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: Windows 10 Version 1903 for x64-based Systems
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: Windows 10 Version 1903 for ARM64-based Systems
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: Windows Server, version 1903 (Server Core installation)
vendor: Microsoft
versions:
status: affected, version: unspecified
}
{
product: Microsoft Visual Studio 2019
vendor: Microsoft
versions:
status: affected, version: 16.0
}
