CVE-2019-1313

An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when it improperly enforces permissions, aka 'SQL Server Management Studio Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1376.

Score

CVSS 3.1 6.5 Medium

Status

Modified - secure@microsoft.com

Published

2019-10-10

Last modified

2024-08-04

Weaknesses

CWE-755

Affected products

• Sql Server Management Studio (Microsoft)

References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1313