CVE-2020-0637

—

CVSS 3.1

6.5 medium

EPSS

5%p92

Published

Jan 14, 2020 (Jan 14, 2020)

Modified

Jun 17, 2026

Description

An information disclosure vulnerability exists when Remote Desktop Web Access improperly handles credential information, aka 'Remote Desktop Web Access Information Disclosure Vulnerability'.

Vendors: microsoft
Products: windows server 2008, windows server 2012, windows server 2016, windows server 2019
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (5.0%)

In the news1 stories

Microsoft Patch Tuesday — Jan. 2020: Vulnerability disclosures and Snort coverage

Cisco TalosJan 14, 19:07 UTC · Jan 14, 2020Vulnerability CVE-2020-0601 CVE-2020-0603 CVE-2020-0605+46 CVEs