CVE-2020-1386 - An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses file information, aka 'Connected User Experiences and Telemetry Service Information Disclosure Vulnerability'

Back Back to CVE browser

MEDIUM

An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses file information, aka 'Connected User Experiences and Telemetry Service Information Disclosure Vulnerability'

Published Jul 14, 2020

5.5

MEDIUM

CVSS 3.1

EPSS 1.22%

Description

An information vulnerability exists when Windows Connected User Experiences and Telemetry Service improperly discloses file information, aka 'Connected User Experiences and Telemetry Service Information Disclosure Vulnerability'.

Affected products

Vendor Microsoft Product Windows Default
n/a
- Version
  10 Version 1709 for 32-bit Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1709 for ARM64-based Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1709 for x64-based Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1803 for 32-bit Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1803 for ARM64-based Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1803 for x64-based Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1809 for 32-bit Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1809 for ARM64-based Systems
  Status
  affected
  Constraints
  -
- Version
  10 Version 1809 for x64-based Systems
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Windows 10 Version 1903 for 32-bit Systems Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Windows 10 Version 1903 for ARM64-based Systems Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Windows 10 Version 1903 for x64-based Systems Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Windows 10 Version 1909 for 32-bit Systems Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Windows 10 Version 1909 for ARM64-based Systems Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Windows 10 Version 1909 for x64-based Systems Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Windows 10 Version 2004 for 32-bit Systems Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Windows 10 Version 2004 for ARM64-based Systems Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Windows 10 Version 2004 for x64-based Systems Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Windows Server Default
n/a
- Version
  2019
  Status
  affected
  Constraints
  -
- Version
  2019 (Core installation)
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Windows Server, version 1903 (Server Core installation) Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Windows Server, version 1909 (Server Core installation) Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -
Vendor Microsoft Product Windows Server, version 2004 (Server Core installation) Default
n/a
- Version
  unspecified
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Windows

n/a

Version	Status	Constraints
10 Version 1709 for 32-bit Systems	affected	-
10 Version 1709 for ARM64-based Systems	affected	-
10 Version 1709 for x64-based Systems	affected	-
10 Version 1803 for 32-bit Systems	affected	-
10 Version 1803 for ARM64-based Systems	affected	-
10 Version 1803 for x64-based Systems	affected	-
10 Version 1809 for 32-bit Systems	affected	-
10 Version 1809 for ARM64-based Systems	affected	-
10 Version 1809 for x64-based Systems	affected	-

Microsoft

Windows 10 Version 1903 for 32-bit Systems

n/a

Version	Status	Constraints
unspecified	affected	-

Microsoft

Windows 10 Version 1903 for ARM64-based Systems

n/a

Version	Status	Constraints
unspecified	affected	-

Microsoft

Windows 10 Version 1903 for x64-based Systems

n/a

Version	Status	Constraints
unspecified	affected	-

Microsoft

Windows 10 Version 1909 for 32-bit Systems

n/a

Version	Status	Constraints
unspecified	affected	-

Microsoft

Windows 10 Version 1909 for ARM64-based Systems

n/a

Version	Status	Constraints
unspecified	affected	-

Microsoft

Windows 10 Version 1909 for x64-based Systems

n/a

Version	Status	Constraints
unspecified	affected	-

Microsoft

Windows 10 Version 2004 for 32-bit Systems

n/a

Version	Status	Constraints
unspecified	affected	-

Microsoft

Windows 10 Version 2004 for ARM64-based Systems

n/a

Version	Status	Constraints
unspecified	affected	-

Microsoft

Windows 10 Version 2004 for x64-based Systems

n/a

Version	Status	Constraints
unspecified	affected	-

Microsoft

Windows Server

n/a

Version	Status	Constraints
2019	affected	-
2019 (Core installation)	affected	-

Microsoft

Windows Server, version 1903 (Server Core installation)

n/a

Version	Status	Constraints
unspecified	affected	-

Microsoft

Windows Server, version 1909 (Server Core installation)

n/a

Version	Status	Constraints
unspecified	affected	-

Microsoft

Windows Server, version 2004 (Server Core installation)

n/a

Version	Status	Constraints
unspecified	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-12262
Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1386
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-12262		Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1386		x_refsource_MISCPatchVendor Advisory