CVE-2019-0819

EPSS 5.4%

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 5.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

16 may 2019Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

An information disclosure vulnerability exists in Microsoft SQL Server Analysis Services when it improperly enforces metadata permissions, aka 'Microsoft SQL Server Analysis Services Information Disclosure Vulnerability'.

Productos afectados

Microsoft · Microsoft SQL Server 2017 for x64-based Systems (CU+GDR)Microsoft · Microsoft SQL Server 2017 for x64-based Systems (GDR)

Referencias

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0819