Information disclosure

An information disclosure vulnerability exists when the Microsoft Exchange PowerShell API grants calendar contributors more view permissions than intended, aka "Microsoft Exchange Information Disclosure Vulnerability." This affects Microsoft Exchange Server...

CVE-2019-0588

CVE-2019-0588 affects Microsoft Exchange Server. The vulnerability is an information disclosure arising when the Exchange PowerShell API grants calendar contributors more view permissions than intended. Root cause: mis-scoped permissions in the PowerShell API lead to unauthorized calendar data ex...

CVE-2019-0588

An information disclosure vulnerability exists when the Microsoft Exchange PowerShell API grants calendar contributors more view permissions than intended, aka "Microsoft Exchange Information Disclosure Vulnerability." This affects Microsoft Exchange Server...

Microsoft Exchange Information Disclosure Vulnerability

An information disclosure vulnerability exists when the Microsoft Exchange PowerShell API grants calendar contributors more view permissions than intended. To exploit this vulnerability, an attacker would need to be granted contributor access to an Exchange Calendar by an administrator via...

January 8, 2019—KB4480962 (OS Build 10240.18094)

None None...

January 8, 2019—KB4480116 (OS Build 17763.253)

None None...

January 8, 2019—KB4480960 (Security-only update)

None None...

January 8, 2019—KB4480957 (Security-only update)

None None...

January 8, 2019—KB4480975 (Monthly Rollup)

None None...

January 8, 2019—KB4480972 (Security-only update)

None None...

January 8, 2019—KB4480973 (OS Build 15063.1563)

None None...

January 8, 2019—KB4480968 (Monthly Rollup)

None None...

January 8, 2019—KB4480970 (Monthly Rollup)

None None...

January 8, 2019—KB4480963 (Monthly Rollup)

None None...

January 8, 2019—KB4480966 (OS Build 17134.523)

None None...

January 8, 2019—KB4480964 (Security-only update)

None None...

January 8, 2019—KB4480978 (OS Build 16299.904)

None None...

PT-2019-1166

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server affected versions not specified Description: The issue is related to insufficient access control in the Microsoft Exchange Server PowerShell API, which can lead to information disclosure. This allows a remote attacke...

CVE-2019-0588: Incorrect Permission Assignment for Critical Resource

An information disclosure vulnerability exists when the Microsoft Exchange PowerShell API grants calendar contributors more view permissions than intended, aka "Microsoft Exchange Information Disclosure Vulnerability." This affects Microsoft Exchange Server...

CVE-2018-6668

A whitelist bypass vulnerability in McAfee Application Control / Change Control 7.0.1 and before allows execution bypass, for example, with simple DLL through interpreters such as PowerShell...