Microsoft SQL Server Management Studio Denial of Service Vulnerability
CVE-2020-1455

5.3MEDIUM

Key Information:

Vendor

Microsoft
Status
Sql Server Management Studio 18.6
Vendor
CVE Published:
17 August 2020

What is CVE-2020-1455?

A denial of service vulnerability exists when Microsoft SQL Server Management Studio (SSMS) improperly handles files. An attacker could exploit the vulnerability to trigger a denial of service. To exploit the vulnerability, an attacker would first require execution on the victim system. The security update addresses the vulnerability by ensuring Microsoft SQL Server Management Studio properly handles files.

Affected Version(s)

SQL Server Management Studio 18.6 Unknown 18.0

References

https://portal.msrc.microsoft.com/en-US/security-guidance...
x_refsource_MISC

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.