CVE-2019-1490

A spoofing vulnerability exists when a Skype for Business Server does not properly sanitize a specially crafted request, aka 'Skype for Business Server Spoofing Vulnerability'.

Score

CVSS 3.1 5.4 Medium

Status

Modified - secure@microsoft.com

Published

2019-12-10

Last modified

2024-08-04

Weaknesses

CWE-74

Affected products

• Skype For Business (Microsoft)
• Skype For Business Server 2019 Cu2 (Microsoft)

References

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1490