CVE-2018-8533

Опубликовано: 10 окт. 2018

Источник: nvd

CVSS3: 5.5

CVSS2: 4.3

EPSS Средний

Описание

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when parsing malicious XML content containing a reference to an external entity, aka "SQL Server Management Studio Information Disclosure Vulnerability." This affects SQL Server Management Studio 17.9, SQL Server Management Studio 18.0. This CVE ID is unique from CVE-2018-8527, CVE-2018-8532.

Ссылки

http://www.securityfocus.com/bid/105476
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041826
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8533
Patch
Vendor Advisory
https://www.exploit-db.com/exploits/45583/
Exploit
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/105476
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id/1041826
Third Party Advisory
VDB Entry
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8533
Patch
Vendor Advisory
https://www.exploit-db.com/exploits/45583/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:sql_server_management_studio:17.9:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:sql_server_management_studio:18.0:*:*:*:*:*:*:*

EPSS

Процентиль: 98%

0.54788

Средний

5.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-611

Связанные уязвимости

CVE-2018-8533

msrc

больше 7 лет назад

SQL Server Management Studio Information Disclosure Vulnerability

GHSA-r6vp-xpx4-xx8q

CVSS3: 5.5

github

больше 3 лет назад

BDU:2018-01326

CVSS3: 4.3

fstec