Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA11482
HistoryMay 14, 2019 - 12:00 a.m.

KLA11482 SB vulnerability in Microsoft Dynamics

2019-05-1400:00:00
Kaspersky Lab
threats.kaspersky.com
20

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.5%

JSON

A security feature bypass vulnerability was found in Microsoft Dynamics On-Premise. Malicious users can exploit this vulnerability to bypass security restrictions.

Original advisories

CVE-2019-1008

Related products

Microsoft-Dynamics-365

CVE list

CVE-2019-1008 warning

KB list

4494412

4498363

4499386

Solution

Install necessary updates from the KB section, that are listed in your Windows Update (Windows Update usually can be accessed from the Control Panel)

Impacts

  • SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

  • Microsoft Dynamics 365 (on-premises) version 8.2Microsoft Dynamics 365 (on-premises) version 9.0Microsoft Dynamics CRM 2015 (on-premises) version 7.0

Related

mskb 3
prion 1
nvd 1
mscve 1
symantec 1
veracode 1
nessus 1
cvelist 1
cve 1
talosblog 1
mskb
mskb
Description of the security update for the security feature bypass vulnerability in Microsoft Dynamics 365 (on-premises) version 8.2: May 14, 2019
2019-05-14 07:00:00
Description of the security update for the security feature bypass vulnerability in Microsoft Dynamics CRM 2015 (on-premises) version 7.0: May 14, 2019
2019-05-14 07:00:00
Description of the security update for the security feature bypass vulnerability in Microsoft Dynamics 365 (on-premises) version 9.0: May 14, 2019
2019-05-14 07:00:00
prion
prion
Security feature bypass
2019-05-16 19:29:00
nvd
nvd
CVE-2019-1008
2019-05-16 19:29:05
mscve
mscve
Microsoft Dynamics On-Premise Security Feature Bypass
2019-05-14 07:00:00
symantec
symantec
Microsoft Dynamics On-Premise CVE-2019-1008 Security Bypass Vulnerability
2019-05-14 00:00:00
veracode
veracode
Privilege Escalation
2019-07-08 10:41:07
nessus
nessus
Security Update for Microsoft Dynamics 365 (on-premises) (May 2019)
2019-07-12 00:00:00
cvelist
cvelist
CVE-2019-1008
2019-05-16 18:24:57
cve
cve
CVE-2019-1008
2019-05-16 19:29:05
talosblog
talosblog
Microsoft Patch Tuesday — May 2019: Vulnerability disclosures and Snort coverage
2019-05-21 06:00:43

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.5%

JSON
Related for KLA11482
mskb3prion1nvd1mscve1symantec1veracode1nessus1cvelist1cve1talosblog1