CVE-2019-0588

2019-01-0821:00:00

microsoft

www.cve.org

7.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.2%

JSON

An information disclosure vulnerability exists when the Microsoft Exchange PowerShell API grants calendar contributors more view permissions than intended, aka “Microsoft Exchange Information Disclosure Vulnerability.” This affects Microsoft Exchange Server.

CNA Affected

[
  {
    "product": "Microsoft Exchange Server",
    "vendor": "Microsoft",
    "versions": [
      {
        "status": "affected",
        "version": "2010 Service Pack 3 Update Rollup 25"
      },
      {
        "status": "affected",
        "version": "2013 Cumulative Update 21"
      },
      {
        "status": "affected",
        "version": "2016 Cumulative Update 10"
      },
      {
        "status": "affected",
        "version": "2016 Cumulative Update 11"
      },
      {
        "status": "affected",
        "version": "2019"
      }
    ]
  }
]