CVE-2020-16960: 
vulnerability analysis and mitigation

Windows Backup Engine Elevation of Privilege Vulnerability (CVE-2020-16960) was identified and disclosed in August 2020. This vulnerability affects multiple versions of Microsoft Windows operating systems, including Windows 10, Windows 7 SP1, Windows Server 2008 R2 SP1, Windows Server 2016, and Windows Server 2019 (NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 7.8, with the following vector: AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. It is categorized under CWE-269, indicating it is related to privilege elevation issues. The vulnerability requires local access and low privileges to exploit (NVD).

If successfully exploited, this vulnerability could allow an attacker to gain elevated privileges on affected systems, potentially leading to complete system compromise with the ability to view, change, or delete data and create new accounts with full user rights (MITRE).

The vulnerability requires local access and low privileges for exploitation. As of the available information, there are no known public exploits specifically targeting this vulnerability (ManageEngine).

Microsoft has released security updates to address this vulnerability. The fix is included in KB4592438 for affected systems. Users are advised to apply the security update to mitigate this vulnerability (ManageEngine).