First published: Wed Sep 11 2019(Updated: )
An information disclosure vulnerability exists in Lync 2013, aka 'Lync 2013 Information Disclosure Vulnerability'.
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Lync | =2013 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2019-1209 is an information disclosure vulnerability that exists in Lync 2013.
CVE-2019-1209 has a severity rating of 6.5, which is considered medium.
CVE-2019-1209 affects Microsoft Lync 2013 by allowing unauthorized users to access sensitive information.
The Common Weakness Enumeration (CWE) ID for CVE-2019-1209 is CWE-200.
Yes, Microsoft has released a security advisory with instructions on how to mitigate the information disclosure vulnerability in Lync 2013.