CVE-2020-1018: fallo en Microsoft Dynamics 365 Business Central 2019…
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
3Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 6.3%
An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when showing the records as a chart page.The attacker who successfully exploited the vulnerability could see the information that are in a masked field.The security update addresses the vulnerability by updating the rendering engine the Windows client to properly detect masked fields and render the content as masked., aka 'Microsoft Dynamics Business Central/NAV Information Disclosure'.
Productos afectados
Microsoft · Dynamics 365 Business Central 2019 Spring UpdateMicrosoft · Microsoft Dynamics 365 BC On PremiseMicrosoft · Microsoft Dynamics NAV 2015Microsoft · Microsoft Dynamics NAV 2016Microsoft · Microsoft Dynamics NAV 2017Microsoft · Microsoft Dynamics NAV 2018CVEs relacionadas — Microsoft Dynamics 365 Business Central 2019…
En el mismo producto, de las más peligrosas a las menos.
CVE-2020-0905—CVE-2020-0905EPSS 10.8%CVE-2020-1022—CVE-2020-1022EPSS 6.8%CVE-2020-17133MEDIUMMicrosoft Dynamics Business Central/NAV Information Disclosure VulnerabilityEPSS 3.8%CVE-2022-41127HIGHMicrosoft Dynamics NAV and Microsoft Dynamics 365 Business Central (On Premises) Remote Code Execution VulnerabilityEPSS 1.7%CVE-2021-1724MEDIUMMicrosoft Dynamics Business Central Cross-site Scripting VulnerabilityEPSS 1.3%