CVE-2019-1209

CWE-200 — Information Exposure4 documents4 sources
Severity
6.5MEDIUM
EPSS
13.8%
top 5.71%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Microsoft Microsoft Lync ServerMicrosoft Lync
Timeline
PublishedSep 11
Latest updateMay 24

Description

An information disclosure vulnerability exists in Lync 2013, aka 'Lync 2013 Information Disclosure Vulnerability'.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:NExploitability: 2.8 | Impact: 3.6

Affected Packages2 packages

▶NVDmicrosoft/lync2013

Patches

Patch: portal.msrc.microsoft.com ↗Patch: portal.msrc.microsoft.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-6rjq-46qf-87g8: An information disclosure vulnerability exists in Lync 2013, aka 'Lync 2013 Information Disclosure Vulnerability'↗2022-05-24
▶
CVEList
CVE-2019-1209: An information disclosure vulnerability exists in Lync 2013, aka 'Lync 2013 Information Disclosure Vulnerability'↗2019-09-11
▶

📋Vendor Advisories

1
Microsoft
Lync 2013 Information Disclosure Vulnerability↗2019-09-10
▶
CVE-2019-1209 (MEDIUM CVSS 6.5) | An information disclosure vulnerabi | cvebase.io