CVE-2019-0821 - Vulnerability Details

Vendors	Products
Microsoft	Windows 10 Windows 7 Windows 8.1 Windows Rt 8.1 Windows Server 2008 Windows Server 2012 Windows Server 2016 Windows Server 2019

Link	Providers
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0821

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "Windows", "vendor": "Microsoft", "versions": [{"status": "affected", "version": "7 for 32-bit Systems Service Pack 1"}, {"status": "affected", "version": "7 for x64-based Systems Service Pack 1"}, {"status": "affected", "version": "8.1 for 32-bit systems"}, {"status": "affected", "version": "8.1 for x64-based systems"}, {"status": "affected", "version": "RT 8.1"}, {"status": "affected", "version": "10 for 32-bit Systems"}, {"status": "affected", "version": "10 for x64-based Systems"}, {"status": "affected", "version": "10 Version 1607 for 32-bit Systems"}, {"status": "affected", "version": "10 Version 1607 for x64-based Systems"}, {"status": "affected", "version": "10 Version 1803 for ARM64-based Systems"}, {"status": "affected", "version": "10 Version 1809 for 32-bit Systems"}, {"status": "affected", "version": "10 Version 1809 for x64-based Systems"}, {"status": "affected", "version": "10 Version 1809 for ARM64-based Systems"}, {"status": "affected", "version": "10 Version 1709 for ARM64-based Systems"}]}, {"product": "Windows Server", "vendor": "Microsoft", "versions": [{"status": "affected", "version": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)"}, {"status": "affected", "version": "2008 R2 for Itanium-Based Systems Service Pack 1"}, {"status": "affected", "version": "2008 R2 for x64-based Systems Service Pack 1"}, {"status": "affected", "version": "2008 for 32-bit Systems Service Pack 2 (Core installation)"}, {"status": "affected", "version": "2012"}, {"status": "affected", "version": "2012 (Core installation)"}, {"status": "affected", "version": "n/a"}]}], "datePublic": "2019-03-12T00:00:00", "descriptions": [{"lang": "en", "value": "An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0703, CVE-2019-0704."}], "problemTypes": [{"descriptions": [{"description": "Information Disclosure", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2019-04-09T02:27:51", "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "shortName": "microsoft"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0821"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "secure@microsoft.com", "ID": "CVE-2019-0821", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Windows", "version": {"version_data": [{"version_value": "7 for 32-bit Systems Service Pack 1"}, {"version_value": "7 for x64-based Systems Service Pack 1"}, {"version_value": "8.1 for 32-bit systems"}, {"version_value": "8.1 for x64-based systems"}, {"version_value": "RT 8.1"}, {"version_value": "10 for 32-bit Systems"}, {"version_value": "10 for x64-based Systems"}, {"version_value": "10 Version 1607 for 32-bit Systems"}, {"version_value": "10 Version 1607 for x64-based Systems"}, {"version_value": "10 Version 1803 for ARM64-based Systems"}, {"version_value": "10 Version 1809 for 32-bit Systems"}, {"version_value": "10 Version 1809 for x64-based Systems"}, {"version_value": "10 Version 1809 for ARM64-based Systems"}, {"version_value": "10 Version 1709 for ARM64-based Systems"}]}}, {"product_name": "Windows Server", "version": {"version_data": [{"version_value": "2008 R2 for x64-based Systems Service Pack 1 (Core installation)"}, {"version_value": "2008 R2 for Itanium-Based Systems Service Pack 1"}, {"version_value": "2008 R2 for x64-based Systems Service Pack 1"}, {"version_value": "2008 for 32-bit Systems Service Pack 2 (Core installation)"}, {"version_value": "2012"}, {"version_value": "2012 (Core installation)"}, {"version_value": "n/a"}]}}]}, "vendor_name": "Microsoft"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0703, CVE-2019-0704."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Information Disclosure"}]}]}, "references": {"reference_data": [{"name": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0821", "refsource": "CONFIRM", "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0821"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T17:58:58.981Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0821"}]}]}, "cveMetadata": {"assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8", "assignerShortName": "microsoft", "cveId": "CVE-2019-0821", "datePublished": "2019-04-09T02:27:51", "dateReserved": "2018-11-26T00:00:00", "dateUpdated": "2024-08-04T17:58:58.981Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : Windows (string)

vendor : Microsoft (string)

versions : [ »

0 : { »

status : affected (string)

version : 7 for 32-bit Systems Service Pack 1 (string)

}

1 : { »

status : affected (string)

version : 7 for x64-based Systems Service Pack 1 (string)

}

2 : { »

status : affected (string)

version : 8.1 for 32-bit systems (string)

}

3 : { »

status : affected (string)

version : 8.1 for x64-based systems (string)

}

4 : { »

status : affected (string)

version : RT 8.1 (string)

}

5 : { »

status : affected (string)

version : 10 for 32-bit Systems (string)

}

6 : { »

status : affected (string)

version : 10 for x64-based Systems (string)

}

7 : { »

status : affected (string)

version : 10 Version 1607 for 32-bit Systems (string)

}

8 : { »

status : affected (string)

version : 10 Version 1607 for x64-based Systems (string)

}

9 : { »

status : affected (string)

version : 10 Version 1803 for ARM64-based Systems (string)

}

10 : { »

status : affected (string)

version : 10 Version 1809 for 32-bit Systems (string)

}

11 : { »

status : affected (string)

version : 10 Version 1809 for x64-based Systems (string)

}

12 : { »

status : affected (string)

version : 10 Version 1809 for ARM64-based Systems (string)

}

13 : { »

status : affected (string)

version : 10 Version 1709 for ARM64-based Systems (string)

}

]

}

1 : { »

product : Windows Server (string)

vendor : Microsoft (string)

versions : [ »

0 : { »

status : affected (string)

version : 2008 R2 for x64-based Systems Service Pack 1 (Core installation) (string)

}

1 : { »

status : affected (string)

version : 2008 R2 for Itanium-Based Systems Service Pack 1 (string)

}

2 : { »

status : affected (string)

version : 2008 R2 for x64-based Systems Service Pack 1 (string)

}

3 : { »

status : affected (string)

version : 2008 for 32-bit Systems Service Pack 2 (Core installation) (string)

}

4 : { »

status : affected (string)

version : 2012 (string)

}

5 : { »

status : affected (string)

version : 2012 (Core installation) (string)

}

6 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

datePublic : 2019-03-12T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0703, CVE-2019-0704. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

description : Information Disclosure (string)

lang : en (string)

type : text (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2019-04-09T02:27:51 (string)

orgId : f38d906d-7342-40ea-92c1-6c4a2c6478c8 (string)

shortName : microsoft (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

]

url : https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0821 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : secure@microsoft.com (string)

ID : CVE-2019-0821 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : Windows (string)

version : { »

version_data : [ »

0 : { »

version_value : 7 for 32-bit Systems Service Pack 1 (string)

}

1 : { »

version_value : 7 for x64-based Systems Service Pack 1 (string)

}

2 : { »

version_value : 8.1 for 32-bit systems (string)

}

3 : { »

version_value : 8.1 for x64-based systems (string)

}

4 : { »

version_value : RT 8.1 (string)

}

5 : { »

version_value : 10 for 32-bit Systems (string)

}

6 : { »

version_value : 10 for x64-based Systems (string)

}

7 : { »

version_value : 10 Version 1607 for 32-bit Systems (string)

}

8 : { »

version_value : 10 Version 1607 for x64-based Systems (string)

}

9 : { »

version_value : 10 Version 1803 for ARM64-based Systems (string)

}

10 : { »

version_value : 10 Version 1809 for 32-bit Systems (string)

}

11 : { »

version_value : 10 Version 1809 for x64-based Systems (string)

}

12 : { »

version_value : 10 Version 1809 for ARM64-based Systems (string)

}

13 : { »

version_value : 10 Version 1709 for ARM64-based Systems (string)

}

]

}

1 : { »

product_name : Windows Server (string)

version : { »

version_data : [ »

0 : { »

version_value : 2008 R2 for x64-based Systems Service Pack 1 (Core installation) (string)

}

1 : { »

version_value : 2008 R2 for Itanium-Based Systems Service Pack 1 (string)

}

2 : { »

version_value : 2008 R2 for x64-based Systems Service Pack 1 (string)

}

3 : { »

version_value : 2008 for 32-bit Systems Service Pack 2 (Core installation) (string)

}

4 : { »

version_value : 2012 (string)

}

5 : { »

version_value : 2012 (Core installation) (string)

}

6 : { »

version_value : n/a (string)

}

]

}

]

}

vendor_name : Microsoft (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

value : An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0703, CVE-2019-0704. (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : Information Disclosure (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0821 (string)

refsource : CONFIRM (string)

url : https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0821 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-04T17:58:58.981Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_CONFIRM (string)

1 : x_transferred (string)

]

url : https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0821 (string)

}

]

}

]

}

cveMetadata : { »

assignerOrgId : f38d906d-7342-40ea-92c1-6c4a2c6478c8 (string)

assignerShortName : microsoft (string)

cveId : CVE-2019-0821 (string)

datePublished : 2019-04-09T02:27:51 (string)

dateReserved : 2018-11-26T00:00:00 (string)

dateUpdated : 2024-08-04T17:58:58.981Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:*", "matchCriteriaId": "21540673-614A-4D40-8BD7-3F07723803B0", "vulnerable": true}, {"criteria": "cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:*", "matchCriteriaId": "E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64", "vulnerable": true}, {"criteria": "cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:*", "matchCriteriaId": "AEE2E768-0F45-46E1-B6D7-087917109D98", "vulnerable": true}, {"criteria": "cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:*", "matchCriteriaId": "83B14968-3985-43C3-ACE5-8307196EFAE3", "vulnerable": true}, {"criteria": "cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:*", "matchCriteriaId": "7CB85C75-4D35-480E-843D-60579EC75FCB", "vulnerable": true}, {"criteria": "cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:*", "matchCriteriaId": "6B8F3DD2-A145-4AF1-8545-CC42892DA3D1", "vulnerable": true}, {"criteria": "cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:*", "matchCriteriaId": "C2B1C231-DE19-4B8F-A4AA-5B3A65276E46", "vulnerable": true}, {"criteria": "cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:*", "matchCriteriaId": "E93068DB-549B-45AB-8E5C-00EB5D8B5CF8", "vulnerable": true}, {"criteria": "cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:*", "matchCriteriaId": "C6CE5198-C498-4672-AF4C-77AB4BE06C5C", "vulnerable": true}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*", "matchCriteriaId": "5F422A8C-2C4E-42C8-B420-E0728037E15C", "vulnerable": true}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:*", "matchCriteriaId": "B320A104-9037-487E-BC9A-62B4A6B49FD0", "vulnerable": true}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:*", "matchCriteriaId": "AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F", "vulnerable": true}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:*", "matchCriteriaId": "A7DF96F8-BA6A-4780-9CA3-F719B3F81074", "vulnerable": true}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:*", "matchCriteriaId": "DB18C4CE-5917-401E-ACF7-2747084FD36E", "vulnerable": true}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:*", "matchCriteriaId": "041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7", "vulnerable": true}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:*", "matchCriteriaId": "5B454BFE-D3AB-4CDC-B79B-F60EA3F57DBA", "vulnerable": true}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:*", "matchCriteriaId": "CAACE735-003E-4ACB-A82E-C0CF97D7F013", "vulnerable": true}, {"criteria": "cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:*", "matchCriteriaId": "DB79EE26-FC32-417D-A49C-A1A63165A968", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0703, CVE-2019-0704."}, {"lang": "es", "value": "Se presenta una vulnerabilidad de divulgaci\u00f3n de informaci\u00f3n en la manera en que el servidor SMB de Windows maneja ciertas peticiones, tambi\u00e9n se conoce como \"Windows SMB Information Disclosure Vulnerability\". Este ID de CVE es diferente de los CVE-2019-0703, CVE-2019-0704."}], "id": "CVE-2019-0821", "lastModified": "2024-11-21T04:17:20.380", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "NONE", "baseScore": 4.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2019-04-09T03:29:00.967", "references": [{"source": "secure@microsoft.com", "tags": ["Patch", "Vendor Advisory"], "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0821"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Vendor Advisory"], "url": "https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0821"}], "sourceIdentifier": "secure@microsoft.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:microsoft:windows_10:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 21540673-614A-4D40-8BD7-3F07723803B0 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:microsoft:windows_10:1607:*:*:*:*:*:*:* (string)

matchCriteriaId : E01A4CCA-4C43-46E0-90E6-3E4DBFBACD64 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:microsoft:windows_10:1703:*:*:*:*:*:*:* (string)

matchCriteriaId : AEE2E768-0F45-46E1-B6D7-087917109D98 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:microsoft:windows_10:1709:*:*:*:*:*:*:* (string)

matchCriteriaId : 83B14968-3985-43C3-ACE5-8307196EFAE3 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:microsoft:windows_10:1803:*:*:*:*:*:*:* (string)

matchCriteriaId : 7CB85C75-4D35-480E-843D-60579EC75FCB (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:o:microsoft:windows_10:1809:*:*:*:*:*:*:* (string)

matchCriteriaId : 6B8F3DD2-A145-4AF1-8545-CC42892DA3D1 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:o:microsoft:windows_7:-:sp1:*:*:*:*:*:* (string)

matchCriteriaId : C2B1C231-DE19-4B8F-A4AA-5B3A65276E46 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:o:microsoft:windows_8.1:-:*:*:*:*:*:*:* (string)

matchCriteriaId : E93068DB-549B-45AB-8E5C-00EB5D8B5CF8 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:o:microsoft:windows_rt_8.1:-:*:*:*:*:*:*:* (string)

matchCriteriaId : C6CE5198-C498-4672-AF4C-77AB4BE06C5C (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:* (string)

matchCriteriaId : 5F422A8C-2C4E-42C8-B420-E0728037E15C (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:itanium:* (string)

matchCriteriaId : B320A104-9037-487E-BC9A-62B4A6B49FD0 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:o:microsoft:windows_server_2008:r2:sp1:*:*:*:*:x64:* (string)

matchCriteriaId : AF07A81D-12E5-4B1D-BFF9-C8D08C32FF4F (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:o:microsoft:windows_server_2012:-:*:*:*:*:*:*:* (string)

matchCriteriaId : A7DF96F8-BA6A-4780-9CA3-F719B3F81074 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:o:microsoft:windows_server_2012:r2:*:*:*:*:*:*:* (string)

matchCriteriaId : DB18C4CE-5917-401E-ACF7-2747084FD36E (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:o:microsoft:windows_server_2016:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 041FF8BA-0B12-4A1F-B4BF-9C4F33B7C1E7 (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:o:microsoft:windows_server_2016:1709:*:*:*:*:*:*:* (string)

matchCriteriaId : 5B454BFE-D3AB-4CDC-B79B-F60EA3F57DBA (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:o:microsoft:windows_server_2016:1803:*:*:*:*:*:*:* (string)

matchCriteriaId : CAACE735-003E-4ACB-A82E-C0CF97D7F013 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:o:microsoft:windows_server_2019:-:*:*:*:*:*:*:* (string)

matchCriteriaId : DB79EE26-FC32-417D-A49C-A1A63165A968 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : An information disclosure vulnerability exists in the way that the Windows SMB Server handles certain requests, aka 'Windows SMB Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-0703, CVE-2019-0704. (string)

}

1 : { »

lang : es (string)

value : Se presenta una vulnerabilidad de divulgación de información en la manera en que el servidor SMB de Windows maneja ciertas peticiones, también se conoce como "Windows SMB Information Disclosure Vulnerability". Este ID de CVE es diferente de los CVE-2019-0703, CVE-2019-0704. (string)

}

]

id : CVE-2019-0821 (string)

lastModified : 2024-11-21T04:17:20.380 (string)

metrics : { »

cvssMetricV2 : [ »

0 : { »

acInsufInfo : false (boolean)

baseSeverity : MEDIUM (string)

cvssData : { »

accessComplexity : LOW (string)

accessVector : NETWORK (string)

authentication : SINGLE (string)

availabilityImpact : NONE (string)

baseScore : 4 (number)

confidentialityImpact : PARTIAL (string)

integrityImpact : NONE (string)

vectorString : AV:N/AC:L/Au:S/C:P/I:N/A:N (string)

version : 2.0 (string)

}

exploitabilityScore : 8 (number)

impactScore : 2.9 (number)

obtainAllPrivilege : false (boolean)

obtainOtherPrivilege : false (boolean)

obtainUserPrivilege : false (boolean)

source : nvd@nist.gov (string)

type : Primary (string)

userInteractionRequired : false (boolean)

}

]

cvssMetricV30 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 6.5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N (string)

version : 3.0 (string)

}

exploitabilityScore : 2.8 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2019-04-09T03:29:00.967 (string)

references : [ »

0 : { »

source : secure@microsoft.com (string)

tags : [ »

0 : Patch (string)

1 : Vendor Advisory (string)

]

url : https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0821 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Patch (string)

1 : Vendor Advisory (string)

]

url : https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0821 (string)

}

]

sourceIdentifier : secure@microsoft.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : NVD-CWE-noinfo (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object