Umbra Wiki cve cve/CVE-2015-0016
Back to wiki

CVE-2015-0016 — Microsoft Windows TS WebProxy Directory Traversal Vulnerability

provenance: imported · CVE: CVE-2015-0016 · CWE: CWE-22

CVE-2015-0016: Microsoft Windows TS WebProxy Directory Traversal Vulnerability

CISA Known Exploited Vulnerability (KEV)

Vendor / project Microsoft
Product Windows
Date added 2022-05-25
Due date 2022-06-15
Ransomware campaign use Unknown

Description

Directory traversal vulnerability in the TS WebProxy (TSWbPrxy) component in Microsoft Windows allows remote attackers to escalate privileges.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2015-0016

Weakness behind it

CISA records this vulnerability as an instance of CWE-22. From there the chain continues into CAPEC attack patterns and ATT&CK techniques, all inside this corpus.

References

  • NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-0016
  • KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

See all 1,745 pages under Vulnerabilities (CVE) →