Lucene search

K
mscveMicrosoftMS:CVE-2024-26255
HistoryApr 09, 2024 - 7:00 a.m.

Windows Remote Access Connection Manager Information Disclosure Vulnerability

2024-04-0907:00:00
Microsoft
msrc.microsoft.com
11
windows
remote access
connection manager
information disclosure
vulnerability
microsoft

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

7.3

Confidence

Low

EPSS

0

Percentile

9.0%

Affected configurations

Vulners
Node
microsoftwindows_server_23h2Range<10.0.25398.830
OR
microsoftwindows_11_23h2Range<10.0.22631.3447
OR
microsoftwindows_11_23h2Range<10.0.22631.3447
OR
microsoftwindows_10_22h2Range<10.0.19045.4291
OR
microsoftwindows_10_22h2Range<10.0.19045.4291
OR
microsoftwindows_10_22h2Range<10.0.19045.4291
OR
microsoftwindows_11_22h2Range<10.0.22621.3447
OR
microsoftwindows_11_22h2Range<10.0.22621.3447
OR
microsoftwindows_10_21h2Range<10.0.19044.4291
OR
microsoftwindows_10_21h2Range<10.0.19044.4291
OR
microsoftwindows_10_21h2Range<10.0.19044.4291
OR
microsoftwindows_11_21h2Range<10.0.22000.2899
OR
microsoftwindows_11_21h2Range<10.0.22000.2899
OR
microsoftwindows_server_2022Range<10.0.20348.2402
OR
microsoftwindows_server_2022Range<10.0.20348.2402
OR
microsoftwindows_server_2019Range<10.0.17763.5696
OR
microsoftwindows_server_2019Range<10.0.17763.5696
OR
microsoftwindows_10_1809Range<10.0.17763.5696
OR
microsoftwindows_10_1809Range<10.0.17763.5696
OR
microsoftwindows_10_1809Range<10.0.17763.5696
VendorProductVersionCPE
microsoftwindows_server_23h2*cpe:2.3:o:microsoft:windows_server_23h2:*:*:*:*:*:*:*:*
microsoftwindows_11_23h2*cpe:2.3:o:microsoft:windows_11_23h2:*:*:*:*:*:*:*:*
microsoftwindows_10_22h2*cpe:2.3:o:microsoft:windows_10_22h2:*:*:*:*:*:*:*:*
microsoftwindows_11_22h2*cpe:2.3:o:microsoft:windows_11_22h2:*:*:*:*:*:*:*:*
microsoftwindows_10_21h2*cpe:2.3:o:microsoft:windows_10_21h2:*:*:*:*:*:*:*:*
microsoftwindows_11_21h2*cpe:2.3:o:microsoft:windows_11_21h2:*:*:*:*:*:*:*:*
microsoftwindows_server_2022*cpe:2.3:o:microsoft:windows_server_2022:*:*:*:*:*:*:*:*
microsoftwindows_server_2019*cpe:2.3:o:microsoft:windows_server_2019:*:*:*:*:*:*:*:*
microsoftwindows_10_1809*cpe:2.3:o:microsoft:windows_10_1809:*:*:*:*:*:*:*:*

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

7.3

Confidence

Low

EPSS

0

Percentile

9.0%