Vulnerabilities > CVE-2019-1265 - Unspecified vulnerability in Microsoft Yammer

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

NONE

network

low complexity

microsoft

NVD

Published: 2019-09-11

Updated: 2020-08-24

Summary

A security feature bypass vulnerability exists when Microsoft Yammer App for Android fails to apply the correct Intune MAM Policy.This could allow an attacker to perform functions that are restricted by Intune Policy.The security update addresses the vulnerability by correcting the way the policy is applied to Yammer App., aka 'Microsoft Yammer Security Feature Bypass Vulnerability'.

Vulnerable Configurations

Part	Description	Count
Application	Microsoft Microsoft Yammer - Microsoft Yammer 5.5.46 Microsoft Yammer 5.5.51 Microsoft Yammer 5.5.56 Microsoft Yammer 5.5.63 Microsoft Yammer 5.5.67.1751 Microsoft Yammer 5.5.68.1757 Microsoft Yammer 5.5.69.1759 Microsoft Yammer 5.5.70 Microsoft Yammer 5.5.71 Microsoft Yammer 5.5.71.1764 Microsoft Yammer 5.5.72.1766 Microsoft Yammer 5.5.73.1767 Microsoft Yammer 5.5.74.1770 Microsoft Yammer 5.5.75.1776 Microsoft Yammer 5.5.76.1778 Microsoft Yammer 5.5.77.1784 Microsoft Yammer 5.5.78.1789 Microsoft Yammer 5.5.79.1792 Microsoft Yammer 5.5.79.1794 Microsoft Yammer 5.5.80.1797 Microsoft Yammer 5.5.81.1798 Microsoft Yammer 5.5.82.1807 Microsoft Yammer 5.5.83.1810 Microsoft Yammer 5.5.84.1821 Microsoft Yammer 5.6.0 Microsoft Yammer 5.6.0.1823 Microsoft Yammer 5.6.1.1830 Microsoft Yammer 5.6.2 Microsoft Yammer 5.6.2.1838 Microsoft Yammer 5.6.3.1840 Microsoft Yammer 5.6.4 Microsoft Yammer 5.6.4.1845 Microsoft Yammer 5.6.5.1845 Microsoft Yammer 5.6.6.1849 Microsoft Yammer 5.6.7.1853 Microsoft Yammer 5.6.8.1860 Microsoft Yammer 5.6.9 Microsoft Yammer 5.6.9.1861	39

The Hacker News

id	THN:F182E505EC977282BAC0B4AE9A1CAA5D
last seen	2019-09-10
modified	2019-09-10
published	2019-09-10
reporter	The Hacker News
source	https://thehackernews.com/2019/09/microsoft-windows-update.html
title	Latest Microsoft Updates Patch 4 Critical Flaws In Windows RDP Client

References

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1265