CVE-2019-0588

EPSS 4.6%

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 4.6%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

08 jan 2019Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

An information disclosure vulnerability exists when the Microsoft Exchange PowerShell API grants calendar contributors more view permissions than intended, aka "Microsoft Exchange Information Disclosure Vulnerability." This affects Microsoft Exchange Server.

Produtos afetados

Microsoft · Microsoft Exchange Server

Referências

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0588 http://www.securityfocus.com/bid/106437