CVE-2021-26859 Microsoft Power BI Information Disclosure Vulnerability

...

CVE-2021-26859

CVE-2021-26859 is a Microsoft Power BI Information Disclosure vulnerability affecting Power BI Report Server versions cited as affected: 15.0.1103.234 and 15.0.1104.300 (per CNNVD). The issue is described as an information disclosure caused by excessive data output by the application, enabling an...

Security Update for Microsoft Power BI Report Server (March 2021)

An information disclosure vulnerability exists in Microsoft Power BI Report Server due to excessive data output by the application in Microsoft Power BI. An authenticated, remote attacker can exploit this, to disclose potentially sensitive information. Note that Nessus has not tested for this iss...