Information Disclosure Vulnerability Affects Windows Admin Center
CVE-2024-43475

7.3HIGH

Key Information:

Vendor

Microsoft
Status
Windows Server 2008 Service Pack 2
Windows Server 2008 Service Pack 2 (server Core Installation)
Windows Server 2008 Service Pack 2
Vendor
CVE Published:
10 September 2024

What is CVE-2024-43475?

The information disclosure vulnerability present in Microsoft Windows Admin Center could potentially allow an attacker to access sensitive information unintentionally exposed by the application. This vulnerability arises from improper handling of user input, leading to the exposure of confidential data to unauthorized users. Security best practices dictate prompt remediation to mitigate potential exploits, and users are advised to review Microsoft’s advisory for comprehensive details and guidance.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Windows Server 2008 Service Pack 2 x64-based Systems 6.0.0 < 6.0.6003.22870

Windows Server 2008 Service Pack 2 (Server Core installation) 32-bit Systems 6.0.0 < 6.0.6003.22870

Windows Server 2008 Service Pack 2 32-bit Systems 6.0.0 < 6.0.6003.22870

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE...
vendor-advisory

EPSS Score

8% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.