Description (CNA)
A security feature bypass vulnerability exists when Skype for Business or Lync do not properly parse UNC path links shared via messages, aka "Skype for Business and Lync Security Feature Bypass Vulnerability." This affects Skype, Microsoft Lync.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Microsoft / Skype | affected Business 2016 (32-bit); affected Business 2016 (64-bit) |
| Microsoft / Microsoft Lync | affected 2013 Service Pack 1 (32-bit); affected 2013 Service Pack 1 (64-bit) |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/104619
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8238
ADP enrichment
No English description supplied.