Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2019-0588

An information disclosure vulnerability exists when the Microsoft Exchange PowerShell API grants calendar contributors more view permissions than intended, aka "Microsoft Exchange

Description

An information disclosure vulnerability exists when the Microsoft Exchange PowerShell API grants calendar contributors more view permissions than intended, aka "Microsoft Exchange Information Disclosure Vulnerability." This affects Microsoft Exchange Server.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Microsoft Exchange Server

  • 2010 Service Pack 3 Update Rollup 25affected
  • 2013 Cumulative Update 21affected
  • 2016 Cumulative Update 10affected
  • 2016 Cumulative Update 11affected
  • 2019affected

References