An information disclosure vulnerability exists when the Windows RDP server improperly discloses the contents of its memory. An attacker who successfully exploited this vulnerability could obtain information to further compromise the system. To exploit this vulnerability, an attacker would have to connect remotely to an affected system and run a specially crafted application. The security update addresses the vulnerability by correcting how the Windows RDP server initializes memory.
Existe una vulnerabilidad de divulgación de información cuando el servidor RDP de Windows divulga incorrectamente el contenido de su memoria, también conocido como 'Vulnerabilidad de divulgación de información del servidor de protocolo de escritorio remoto'. Este ID de CVE es exclusivo de CVE-2019-1225.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
| Attack Vector | NETWORK |
|---|---|
| Attack Complexity | LOW |
| Privileges Required | NONE |
| User Interaction | NONE |
| Scope | UNCHANGED |
| Confidentiality Impact | HIGH |
| Integrity Impact | NONE |
| Availability Impact | NONE |
AV:N/AC:L/Au:N/C:P/I:N/A:N
| Access Vector | NETWORK |
|---|---|
| Access Complexity | LOW |
| Authentication | NONE |
| Confidentiality Impact | PARTIAL |
| Integrity Impact | NONE |
| Availability Impact | NONE |
| Source | Type | Description |
|---|---|---|
| [email protected] | Primary |
en
CWE-200
|
| Vendor | Product | Version | Update | Type |
|---|---|---|---|---|
| microsoft | windows_10 | 1803 | <built-in method update of dict object at 0x7e60baa0abc0> | Operating System |
| microsoft | windows_10 | 1809 | <built-in method update of dict object at 0x7e60bbd619c0> | Operating System |
| microsoft | windows_10 | 1903 | <built-in method update of dict object at 0x7e60b847b100> | Operating System |
| microsoft | windows_server_2016 | 1803 | <built-in method update of dict object at 0x7e6112303ac0> | Operating System |
| microsoft | windows_server_2016 | 1903 | <built-in method update of dict object at 0x7e60baa08900> | Operating System |
| microsoft | windows_server_2019 | - | <built-in method update of dict object at 0x7e60baa0a280> | Operating System |
| Vulnerable | CPE |
|---|---|
| Yes | cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:microsoft:windows_10:1903:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:microsoft:windows_server_2016:1903:*:*:*:*:*:*:* |
| Yes | cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:* |