CVE-2019-1376: Medium severity microsoft sql server management studio vulnerability

Published Oct 10, 2019

Updated

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when it improperly enforces permissions, aka 'SQL Server Management Studio Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1313.

Affected Software

1 affected component

Microsoft SQL Server Management Studio=18.3.1

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1376

Event History

Oct 10, 2019

CVE Published

via MITRE·01:28 PM

Data Sourced

via MITRE·01:28 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2019-1376?

CVE-2019-1376 is rated as important in severity due to the potential for information disclosure.

How do I fix CVE-2019-1376?

To fix CVE-2019-1376, upgrade to a later version of Microsoft SQL Server Management Studio that addresses this vulnerability.

What kind of vulnerability is CVE-2019-1376?

CVE-2019-1376 is an information disclosure vulnerability that arises from improper enforcement of permissions.

Which version of Microsoft SQL Server Management Studio is affected by CVE-2019-1376?

Microsoft SQL Server Management Studio version 18.3.1 is affected by CVE-2019-1376.

Can CVE-2019-1376 be exploited remotely?

Yes, CVE-2019-1376 can be exploited remotely, allowing attackers to gain unauthorized access to sensitive information.