Skip to content
CVE PROGRAM SOURCE RECORD4.9 Medium

CVE-2024-20662

Windows Online Certificate Status Protocol (OCSP) Information Disclosure Vulnerability

Description

Windows Online Certificate Status Protocol (OCSP) Information Disclosure Vulnerability

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Microsoft Windows Server 2019

  • 10.0.17763.0 to < 10.0.17763.5329affected

Microsoft Windows Server 2019 (Server Core installation)

  • 10.0.17763.0 to < 10.0.17763.5329affected

Microsoft Windows Server 2022

  • 10.0.20348.0 to < 10.0.20348.2227affected

Microsoft Windows Server 2022, 23H2 Edition (Server Core installation)

  • 10.0.25398.0 to < 10.0.25398.643affected

Microsoft Windows Server 2016

  • 10.0.14393.0 to < 10.0.14393.6614affected

Microsoft Windows Server 2016 (Server Core installation)

  • 10.0.14393.0 to < 10.0.14393.6614affected

Microsoft Windows Server 2008 Service Pack 2

  • 6.0.6003.0 to < 6.0.6003.22464affected

Microsoft Windows Server 2008 Service Pack 2 (Server Core installation)

  • 6.0.6003.0 to < 6.0.6003.22464affected

Microsoft Windows Server 2008 Service Pack 2

  • 6.0.6003.0 to < 6.0.6003.22464affected

Microsoft Windows Server 2008 R2 Service Pack 1

  • 6.1.7601.0 to < 6.1.7601.26910affected

Microsoft Windows Server 2008 R2 Service Pack 1 (Server Core installation)

  • 6.1.7601.0 to < 6.1.7601.26910affected

Microsoft Windows Server 2012

  • 6.2.9200.0 to < 6.2.9200.24664affected

Microsoft Windows Server 2012 (Server Core installation)

  • 6.2.9200.0 to < 6.2.9200.24664affected

Microsoft Windows Server 2012 R2

  • 6.3.9600.0 to < 6.3.9600.21765affected

Microsoft Windows Server 2012 R2 (Server Core installation)

  • 6.3.9600.0 to < 6.3.9600.21765affected

References