Описание
A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'.
A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2020-0618
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0618
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-0618
- http://packetstormsecurity.com/files/156707/SQL-Server-Reporting-Services-SSRS-ViewState-Deserialization.html
- http://packetstormsecurity.com/files/159216/Microsoft-SQL-Server-Reporting-Services-2016-Remote-Code-Execution.html
Связанные уязвимости
A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'.
Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability
Уязвимость системы управления реляционными базами данных Microsoft SQL Server, связанная с недостаточной проверкой входных данных, позволяющая нарушителю выполнить произвольный код