CVE-2018-8238

EPSS 5.5%

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 5.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

11 jul 2018Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A security feature bypass vulnerability exists when Skype for Business or Lync do not properly parse UNC path links shared via messages, aka "Skype for Business and Lync Security Feature Bypass Vulnerability." This affects Skype, Microsoft Lync.

Productos afectados

Microsoft · Microsoft Lync Microsoft · Skype

Referencias

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8238 http://www.securityfocus.com/bid/104619