CVE-2018-0828 - Windows 10 version 1607 and Windows Server 2016 allow an elevation of privilege vulnerability due to how the MultiPoint management account password is stored, aka "Windows Elevation of Privilege Vulnerability"

Back Back to CVE browser

HIGH

Windows 10 version 1607 and Windows Server 2016 allow an elevation of privilege vulnerability due to how the MultiPoint management account password is stored, aka "Windows Elevation of Privilege Vulnerability"

Published Feb 15, 2018

7.8

HIGH

CVSS 3.0

EPSS 1.02%

Description

Windows 10 version 1607 and Windows Server 2016 allow an elevation of privilege vulnerability due to how the MultiPoint management account password is stored, aka "Windows Elevation of Privilege Vulnerability".

Affected products

Vendor Microsoft Corporation Product Windows Default
unknown
Affected
- Windows 10 version 1607 and Windows Server 2016

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Microsoft Corporation	Windows	unknown	Affected Windows 10 version 1607 and Windows Server 2016

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-522

Insufficiently Protected Credentials

References (4)

http://www.securityfocus.com/bid/102935
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1040373
vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-1633
Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0828
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/102935		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
http://www.securitytracker.com/id/1040373		vdb-entryx_refsource_SECTRACKThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2018-1633		Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0828		x_refsource_CONFIRMPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner microsoft

Published Feb 15, 2018

Updated Sep 17, 2024

Reserved Dec 1, 2017

Link CVE-2018-0828

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2018-0828

Red Hat

No data

ENISA EUVD

Assigner microsoft

Published Feb 15, 2018

Updated Sep 17, 2024

Link EUVD-2018-1633

GitHub

No data