CVE-2017-8516

Опубликовано: 08 авг. 2017

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

Microsoft SQL Server Analysis Services in Microsoft SQL Server 2012, Microsoft SQL Server 2014, and Microsoft SQL Server 2016 allows an information disclosure vulnerability when it improperly enforces permissions, aka "Microsoft SQL Server Analysis Services Information Disclosure Vulnerability".

Ссылки

http://www.securityfocus.com/bid/100041
Third Party Advisory
http://www.securitytracker.com/id/1039110
URL Repurposed
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8516
Patch
Vendor Advisory
http://www.securityfocus.com/bid/100041
Third Party Advisory
http://www.securitytracker.com/id/1039110
URL Repurposed
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8516
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:sql_server:2012:sp3:*:*:*:*:*:*

cpe:2.3:a:microsoft:sql_server:2014:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:sql_server:2014:sp2:*:*:*:*:*:*

cpe:2.3:a:microsoft:sql_server:2016:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:sql_server:2016:sp1:*:*:*:*:*:*

EPSS

Процентиль: 77%

0.01089

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2017-8516

msrc

почти 8 лет назад

Microsoft SQL Server Analysis Services Information Disclosure Vulnerability

GHSA-qgr4-h86c-w3g3