2 lines
2.5 KiB
JSON
2 lines
2.5 KiB
JSON
{"affected":[{"affectedData":[{"product":"Skype for Business Server 2019 CU2","vendor":"Microsoft","versions":[{"status":"affected","version":"unspecified"}]}],"source":"secure@microsoft.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:microsoft:skype_for_business:2019:cumulative_update_2:*:*:*:*:*:*","matchCriteriaId":"38ABD417-45D5-4212-BC19-929B71E6D1D2","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"A spoofing vulnerability exists when a Skype for Business Server does not properly sanitize a specially crafted request, aka 'Skype for Business Server Spoofing Vulnerability'."},{"lang":"es","value":"Hay una vulnerabilidad de suplantación de identidad cuando un Servidor de Skype for Business no sanea apropiadamente una petición especialmente diseñada, también se conoce como \"Skype for Business Server Spoofing Vulnerability\"."}],"id":"CVE-2019-1490","lastModified":"2026-06-17T02:28:42.377","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"LOW","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"SINGLE","availabilityImpact":"NONE","baseScore":3.5,"confidentialityImpact":"NONE","integrityImpact":"PARTIAL","vectorString":"AV:N/AC:M/Au:S/C:N/I:P/A:N","version":"2.0"},"exploitabilityScore":6.8,"impactScore":2.9,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"NONE","baseScore":5.4,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"CHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},"exploitabilityScore":2.3,"impactScore":2.7,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2019-12-10T22:15:18.417","references":[{"source":"secure@microsoft.com","tags":["Patch","Vendor Advisory"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1490"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1490"}],"sourceIdentifier":"secure@microsoft.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-74"}],"source":"nvd@nist.gov","type":"Primary"}]}
|