Vulnerability in Microsoft Windows Server 2008
CVE-2010-3223
The user interface in Microsoft Cluster Service (MSCS) in Microsoft Windows Server 2008 R2 does not properly set administrative-share permissions for new cluster disks that are shared as part of a failover cluster, which allows remote attackers to read or modify data on these disks via requests to the associated share, aka "Permissions on New Cluster Disks Vulnerability."
EPSS: 0.130 (95.9th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Windows_server_2008 — versions r2
- N/a — versions n/a
Weakness classification (CWE)
References
- secure@microsoft.com (x_refsource_MS, vendor-advisory)
- secure@microsoft.com (signature, x_refsource_OVAL, vdb-entry)
- secure@microsoft.com (vdb-entry, x_refsource_SECTRACK)