Description (CNA)
An information disclosure vulnerability exists when the Microsoft Exchange PowerShell API grants calendar contributors more view permissions than intended, aka "Microsoft Exchange Information Disclosure Vulnerability." This affects Microsoft Exchange Server.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Microsoft / Microsoft Exchange Server | affected 2010 Service Pack 3 Update Rollup 25; affected 2013 Cumulative Update 21; affected 2016 Cumulative Update 10; affected 2016 Cumulative Update 11; affected 2019 |
CWE
No CWE identifiers supplied.
References
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0588
- http://www.securityfocus.com/bid/106437
ADP enrichment
No English description supplied.