CVE-2019-0588 - An information disclosure vulnerability exists when the Microsoft Exchange PowerShell API grants calendar contributors more view permissions than intended, aka "Microsoft Exchange Information Disclosure Vulnerability." This affects Microsoft Exchange Server

Back Back to CVE browser

MEDIUM

An information disclosure vulnerability exists when the Microsoft Exchange PowerShell API grants calendar contributors more view permissions than intended, aka "Microsoft Exchange Information Disclosure Vulnerability." This affects Microsoft Exchange Server

Published Jan 8, 2019

6.5

MEDIUM

CVSS 3.1

EPSS 4.63%

Description

An information disclosure vulnerability exists when the Microsoft Exchange PowerShell API grants calendar contributors more view permissions than intended, aka "Microsoft Exchange Information Disclosure Vulnerability." This affects Microsoft Exchange Server.

Affected products

Vendor Microsoft Product Microsoft Exchange Server Default
n/a
- Version
  2010 Service Pack 3 Update Rollup 25
  Status
  affected
  Constraints
  -
- Version
  2013 Cumulative Update 21
  Status
  affected
  Constraints
  -
- Version
  2016 Cumulative Update 10
  Status
  affected
  Constraints
  -
- Version
  2016 Cumulative Update 11
  Status
  affected
  Constraints
  -
- Version
  2019
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Microsoft

Microsoft Exchange Server

n/a

Version	Status	Constraints
2010 Service Pack 3 Update Rollup 25	affected	-
2013 Cumulative Update 21	affected	-
2016 Cumulative Update 10	affected	-
2016 Cumulative Update 11	affected	-
2019	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-732

Incorrect Permission Assignment

References (2)

http://www.securityfocus.com/bid/106437
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0588
x_refsource_CONFIRMPatchVendor Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/106437		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0588		x_refsource_CONFIRMPatchVendor Advisory