Description of the security update for Skype for Business Server 2015 CU 8: July 14, 2020

Summary

This security update resolves vulnerabilities that exist when Skype for Business Server incorrectly handles OAuth token validation. To learn more about these vulnerabilities, see Microsoft Common Vulnerabilities and Exposures CVE-2020-1025.

Note To apply this security update, you must have the release version of Skype for Business Server 2015 CU 8 installed on the computer.

How to get and install the update

To get this update, install the following updates:

• July 2020 cumulative update 6.0.9319.591 for Skype for Business Server 2015, Core Components
• July 2020 cumulative update 6.0.9319.591 for Skype for Business Server 2015, Web Components Server

More information

Security update deployment information

For deployment information about this update, see security update deployment information: July 14, 2020.

How to get help and support for this security update

Protect yourself online: Windows Security supportLearn how we guard against cyber threats: Microsoft Security