CVE-2018-8238

Опубликовано: 11 июл. 2018

Источник: nvd

CVSS3: 7.8

CVSS2: 9.3

EPSS Низкий

Описание

A security feature bypass vulnerability exists when Skype for Business or Lync do not properly parse UNC path links shared via messages, aka "Skype for Business and Lync Security Feature Bypass Vulnerability." This affects Skype, Microsoft Lync.

Ссылки

http://www.securityfocus.com/bid/104619
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8238
Patch
Vendor Advisory
http://www.securityfocus.com/bid/104619
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8238
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:lync:2013:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:skype_for_business:2016:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.07077

Низкий

7.8 High

CVSS3

9.3 Critical

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

CVE-2018-8238

msrc

больше 7 лет назад

Skype for Business and Lync Security Feature Bypass Vulnerability

GHSA-v74r-x7x3-53vj