Information Disclosure vulnerability in Microsoft SQL Server

Description

An incorrect enforcement of permissions was found in Microsoft SQL Server Analysis Services. By exploiting this vulnerability malicious users can obtain sensitive information.

---

Technical details

This vulnerability can be exploited in case an affected SQL server database can be accessed using the attacker’s credentials.

Original advisories

• CVE-2017-8516

Related products

• Microsoft-SQL-Server

CVE list

• CVE-2017-8516
  warning

KB list

• 4019092
• 4019090
• 4019091
• 4032542
• 4019093
• 4036996
• 4019088
• 4019086
• 4019089
• 4019095

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com