CVE-2019-1313

Medium

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when it improperly enforces permissions,…

microsoft·CWE-755·Published 2019-10-10

CVSS

6.5

EPSS

0.05

KEV

Exploits

cve.orgen

251 chars

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when it improperly enforces permissions, aka 'SQL Server Management Studio Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1376.

NVDen

251 chars

NVDes

284 chars

Hay una vulnerabilidad de divulgación de información en Microsoft SQL Server Management Studio (SSMS) cuando aplica inapropiadamente los permisos, también se conoce como "SQL Server Management Studio Information Disclosure Vulnerability". Este ID de CVE es diferente de CVE-2019-1376.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	4.0	8.0	2.9	AV:N/AC:L/Au:S/C:P/I:N/A:N
3.1	Primary	NVD	6.5	2.8	3.6	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N