Microsoft January 2019 Patch Tuesday updates fix 7 critical vulnerabilities
60
CVE-2019-0588
—CVSS 3.1
6.5 medium
EPSS
5%p91
Published
()
Modified
Description
An information disclosure vulnerability exists when the Microsoft Exchange PowerShell API grants calendar contributors more view permissions than intended, aka "Microsoft Exchange Information Disclosure Vulnerability." This affects Microsoft Exchange Server.
- Vendors
- microsoft
- Products
- exchange server
- Weakness
- CWE-732
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N