The issues include multiple cross-site scripting (XSS) bugs and XML external entity (XXE) problems.

As such, a compromised PC would offer access to a range of privileged functions and access. “The goal of MMC is to provide a programming platform for creating and hosting applications that manage Microsoft Windows-based environments, and to provide a simple, consistent and integrated management user interface and administration model,” they explained in a breakdown of the vulnerabilities, given to clients last week but just made public on Monday. The bugs are grouped under one umbrella (CVE-2019-0948) and are found in the Microsoft Management Console (MMC), according to Check Point researchers Eran Vaknin and Alon Boxiner,

Windows interface that allows system administrators to configure and monitor systems from an admin level has several vulnerabilities that would allow an attacker to install malicious payloads and even take over a target, privileged machine. 14:14:51 ERROR .RepositoryImpl - Failed to initialize workspace 'default' The $AFX_HOME/mmc-console/logs/mmc-console-app.log shows the failure is Unable to initialize the query handler when attempting to access the SearchIndex. Full details will be found in the appropriate container log file SEVERE: One or more listeners failed to start.

The $AFX_HOME/mmc-console/logs/catalina.out file which logs information about the deployment of the mmc-console shows that the deployment of the mmc-console failed:ĩ:21:57 AM .StandardContext startInternal 04:39:31.397 .manager.MMCRequestManagerImpl:136 - Unable to get status for all Connectors from MMCĬom.MMCException: Failed to get flows for server. The $AFX_HOME/esb/logs/ has a Failed to get flows for server error which indicates that mmc-console cannot be reached. The AFX command line tool ( afx status) shows the AFX Server as active (even though it is not fully functional as indicated by errors in the AFX log files.)

Mmc console