CVE-2023-29348: Windows Remote Desktop Gateway (RD Gateway) Information Disclosure Vulnerability
Windows Remote Desktop Gateway (RD Gateway) Information Disclosure Vulnerability
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.17763.4974Patch KB5031361 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.1.7601.26769Patch KB5031441 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.2.9200.24523Patch KB5031427 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.3.9600.21620Patch KB5031407 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.20348.2031Patch KB5031364 - Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 10.0.14393.6351Patch KB5031362
Event History
Frequently Asked Questions
What is CVE-2023-29348?
CVE-2023-29348 refers to the Windows Remote Desktop Gateway (RD Gateway) Information Disclosure Vulnerability.
How severe is CVE-2023-29348?
CVE-2023-29348 has a severity rating of 6.5, which is considered high.
Which software is affected by CVE-2023-29348?
CVE-2023-29348 affects various versions of Windows Server, including Windows Server 2022, 2012 R2, 2012, 2019, and 2008 R2.
How can I fix CVE-2023-29348?
To fix CVE-2023-29348, you should apply the relevant security patches provided by Microsoft for your specific version of Windows Server. Please refer to the Microsoft support links in the affected software section for the appropriate patches.
Where can I find more information about CVE-2023-29348?
You can find more information about CVE-2023-29348 on the Microsoft Security Response Center website at the provided reference link.