CVE-2024-38017 | THREATINT

Assigner	microsoft
Reserved	2024-06-11
Published	2024-07-09
Updated	2024-10-08

Description

Microsoft Message Queuing Information Disclosure Vulnerability

MEDIUM: 5.5

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N/E:P/RL:O/RC:C

Problem types

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Product status

10.0.0 before 10.0.17763.6054

affected

10.0.0 before 10.0.17763.6054

affected

10.0.0 before 10.0.17763.6054

affected

10.0.0 before 10.0.20348.2582

affected

10.0.0 before 10.0.22000.3079

affected

10.0.0 before 10.0.19044.4651

affected

10.0.0 before 10.0.22621.3880

affected

10.0.0 before 10.0.19045.4651

affected

10.0.0 before 10.0.22631.3880

affected

10.0.0 before 10.0.22631.3880

affected

10.0.0 before 10.0.25398.1009

affected

10.0.0 before 10.0.10240.20710

affected

10.0.0 before 10.0.14393.7159

affected

10.0.0 before 10.0.14393.7159

affected

10.0.0 before 10.0.14393.7159

affected

6.0.0 before 6.0.6003.22769

affected

6.0.0 before 6.0.6003.22769

affected

6.0.0 before 6.0.6003.22769

affected

6.1.0 before 6.1.7601.27219

affected

6.0.0 before 6.1.7601.27219

affected

6.2.0 before 6.2.9200.24975

affected

6.2.0 before 6.2.9200.24975

affected

6.3.0 before 6.3.9600.22074

affected

6.3.0 before 6.3.9600.22074

affected

References

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-38017 (Microsoft Message Queuing Information Disclosure Vulnerability) vendor-advisory

cve.org CVE-2024-38017

nvd.nist.gov CVE-2024-38017

Download JSON