A spoofing vulnerability exists when a Lync Server or Skype for Business Server does not properly sanitize a specially crafted request, aka ‘Skype for Business and Lync Spoofing Vulnerability’.
[
{
"product": "Skype for Business Server 2015",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "March 2019 Update"
}
]
},
{
"product": "Microsoft Lync Server 2013",
"vendor": "Microsoft",
"versions": [
{
"status": "affected",
"version": "July 2018 Update"
}
]
}
]