CVE-2020-0692: High severity microsoft exchange server vulnerability
Published Feb 11, 2020
·Updated
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of Privilege Vulnerability'.
Affected Software
5 affected components
Microsoft Exchange Server=2013-cumulative_update_23
Microsoft Exchange Server=2016-cumulative_update_14
Microsoft Exchange Server=2016-cumulative_update_15
Microsoft Exchange Server=2019-cumulative_update_3
Microsoft Exchange Server=2019-cumulative_update_4
Remediation
Event History
Feb 11, 2020
CVE Published
via MITRE·09:23 PM
Data Sourced
via MITRE·09:23 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-0692?
CVE-2020-0692 is rated as important by Microsoft, indicating that it allows for elevation of privilege.
2
How do I fix CVE-2020-0692?
To remediate CVE-2020-0692, apply the latest cumulative update for your specific version of Microsoft Exchange Server.
3
Which versions of Microsoft Exchange Server are affected by CVE-2020-0692?
CVE-2020-0692 affects Microsoft Exchange Server 2013, 2016, and 2019, specifically certain cumulative update versions.
4
What type of vulnerability is CVE-2020-0692 classified as?
CVE-2020-0692 is classified as an elevation of privilege vulnerability.
5
What are the potential risks of not addressing CVE-2020-0692?
If CVE-2020-0692 is not addressed, an attacker could gain elevated permissions, leading to unauthorized access and control over the affected Exchange Server.