CVE-2024-29060

2024-06-1117:15:51

CWE-284

[email protected]

web.nvd.nist.gov

cve-2024-29060

elevation of privilege

visual studio

6.7 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L

0.001 Low

EPSS

Percentile

19.5%

JSON

Visual Studio Elevation of Privilege Vulnerability

Affected configurations

NVD

Node

microsoftvisual_studio_2017Range15.0–15.9.63

microsoftvisual_studio_2019Range16.0–16.11.37

microsoftvisual_studio_2022Range17.4–17.4.20

microsoftvisual_studio_2022Range17.6–17.6.16

microsoftvisual_studio_2022Range17.8–17.8.11

microsoftvisual_studio_2022Range17.10–17.10.2

CPENameOperatorVersion
microsoft:visual_studio_2017microsoft visual studio 2017lt15.9.63
microsoft:visual_studio_2019microsoft visual studio 2019lt16.11.37
microsoft:visual_studio_2022microsoft visual studio 2022lt17.4.20
microsoft:visual_studio_2022microsoft visual studio 2022lt17.6.16
microsoft:visual_studio_2022microsoft visual studio 2022lt17.8.11
microsoft:visual_studio_2022microsoft visual studio 2022lt17.10.2

CPE	Name	Operator	Version
microsoft:visual_studio_2017	microsoft visual studio 2017	lt	15.9.63
microsoft:visual_studio_2019	microsoft visual studio 2019	lt	16.11.37
microsoft:visual_studio_2022	microsoft visual studio 2022	lt	17.4.20
microsoft:visual_studio_2022	microsoft visual studio 2022	lt	17.6.16
microsoft:visual_studio_2022	microsoft visual studio 2022	lt	17.8.11
microsoft:visual_studio_2022	microsoft visual studio 2022	lt	17.10.2

CNA Affected

[
  {
    "vendor": "Microsoft",
    "product": "Microsoft Visual Studio 2022 version 17.10",
    "cpes": [
      "cpe:2.3:a:microsoft:visual_studio:2022:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "17.10",
        "lessThan": "17.10.2",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)",
    "cpes": [
      "cpe:2.3:a:microsoft:visual_studio_2017:*:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "15.9.0",
        "lessThan": "15.9.63",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Visual Studio 2019 version 16.11 (includes 16.0 - 16.10)",
    "cpes": [
      "cpe:2.3:a:microsoft:visual_studio_2019:*:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "16.11.0",
        "lessThan": "16.11.37",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Visual Studio 2022 version 17.4",
    "cpes": [
      "cpe:2.3:a:microsoft:visual_studio_2022:17.4:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "17.4.0",
        "lessThan": "17.4.20",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Visual Studio 2022 version 17.6",
    "cpes": [
      "cpe:2.3:a:microsoft:visual_studio:2022:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "17.6.0",
        "lessThan": "17.6.16",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Microsoft",
    "product": "Microsoft Visual Studio 2022 version 17.8",
    "cpes": [
      "cpe:2.3:a:microsoft:visual_studio:2022:*:*:*:*:*:*:*"
    ],
    "platforms": [
      "Unknown"
    ],
    "versions": [
      {
        "version": "17.8.0",
        "lessThan": "17.8.11",
        "versionType": "custom",
        "status": "affected"
      }
    ]
  }
]