Information disclosure in Microsoft Internet Explorer - CVE-2020-1432

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU29786

Information disclosure in Microsoft Internet Explorer - CVE-2020-1432

Published: July 14, 2020 / Updated: July 15, 2020


Vulnerability identifier: #VU29786
CSH Severity: Low
CVSS v4: 5.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N]
CVE-ID: CVE-2020-1432
CWE-ID: CWE-200
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to Skype for Business is accessed via Internet Explorer. A remote attacker can trick a victim to click a specially crafted URL that prompts the Skype app and gain unauthorized access to sensitive information on the system.


Affected software

Microsoft Internet Explorer
Solutions Enabler Virtual Appliance
Solutions Enabler
Unisphere for PowerMax Virtual Appliance
Unisphere for PowerMax

How to mitigate CVE-2020-1432

Install updates from vendor's website.

Solutions Enabler Virtual Appliance - addressed in versions 9.1.0.12, 9.2.0.1
Solutions Enabler - addressed in versions 9.1.0.12, 9.2.0.1
Unisphere for PowerMax Virtual Appliance - addressed in versions 9.1.0.24, 9.2.0.6
Unisphere for PowerMax - addressed in versions 9.1.0.24, 9.2.0.6

External References

Related Security Bulletins