CVE-2020-0989: 
vulnerability analysis and mitigation

An information disclosure vulnerability exists in Windows Mobile Device Management (MDM) Diagnostics when it improperly handles junctions (CVE-2020-0989). The vulnerability was discovered in 2019 and publicly disclosed in September 2020. This security issue affects various versions of Microsoft Windows 10 and Windows Server 2016 (NVD).

The vulnerability has been assigned a CVSS v3.1 Base Score of 5.5 (Medium) with the vector string CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. The vulnerability is classified under CWE-862 (Missing Authorization). When Windows MDM Diagnostics improperly handles junctions, it can lead to unauthorized information disclosure (NVD, CVE).

An attacker who successfully exploits this vulnerability could bypass access restrictions to read files. The vulnerability primarily affects the confidentiality of the system, with no direct impact on integrity or availability (NVD).

To exploit this vulnerability, an attacker would first need to log on to the system. Once logged in, the attacker could run a specially crafted application that could exploit the vulnerability and access files (CVE).

Microsoft has released a security update that addresses the vulnerability by correcting how Windows MDM Diagnostics handles files. Users are advised to apply the security update to affected systems (NVD).