Lucene search

K
mscveMicrosoftMS:CVE-2023-28290
HistoryMay 09, 2023 - 7:00 a.m.

Microsoft Remote Desktop app for Windows Information Disclosure Vulnerability

2023-05-0907:00:00
Microsoft
msrc.microsoft.com
42
microsoft
remote desktop
windows
information disclosure
vulnerability

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

52.9%

Affected configurations

Vulners
Node
microsoftremote_desktopRange<10.2.3006.0
VendorProductVersionCPE
microsoftremote_desktop*cpe:2.3:a:microsoft:remote_desktop:*:*:*:*:*:*:*:*

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

52.9%