CVE-2020-1113: 
vulnerability analysis and mitigation

A security feature bypass vulnerability (CVE-2020-1113) was discovered in Microsoft Windows Task Scheduler service. The vulnerability was disclosed on May 21, 2020, affecting Microsoft Windows when the Task Scheduler service fails to properly verify client connections over RPC. This vulnerability impacts various versions of Windows including Windows 10, Windows Server 2008, Windows Server 2012, Windows Server 2016, and Windows Server 2019 (NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 7.5 (HIGH) with the vector string CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H. The vulnerability is related to improper certificate validation (CWE-295) in the Task Scheduler service's RPC client connection verification process (NVD, Rapid7).

If successfully exploited, this vulnerability could allow an attacker to bypass security features in Windows Task Scheduler, potentially leading to unauthorized access with high impacts on confidentiality, integrity, and availability of the affected system (NVD).

The vulnerability requires network access and low privileges but high attack complexity to exploit. No evidence of active exploitation in the wild has been publicly reported at the time of disclosure (NVD).

Microsoft has released security updates to address this vulnerability. Users should apply the appropriate patches for their Windows version through Windows Update. Multiple KB updates are available including KB4556799, KB4556807, KB4556812, KB4556813, and KB4556826 depending on the Windows version (Rapid7).