Lucene search

[email protected]NVD:CVE-2018-8558

HistoryNov 14, 2018 - 1:29 a.m.

CVE-2018-8558

2018-11-1401:29:01

CWE-200

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

6.2

Confidence

High

EPSS

0.006

Percentile

78.0%

JSON

An information disclosure vulnerability exists when Microsoft Outlook fails to respect “Default link type” settings configured via the SharePoint Online Admin Center, aka “Microsoft Outlook Information Disclosure Vulnerability.” This affects Office 365 ProPlus, Microsoft Office. This CVE ID is unique from CVE-2018-8579.

Affected configurations

Nvd

Node

microsoftofficeMatch2019

microsoftoffice_365_proplusMatch-

VendorProductVersionCPE
microsoftoffice2019cpe:2.3:a:microsoft:office:2019:*:*:*:*:*:*:*
microsoftoffice_365_proplus-cpe:2.3:a:microsoft:office_365_proplus:-:*:*:*:*:*:*:*