Vulnerabilities > CVE-2020-0765 - Unspecified vulnerability in Microsoft Remote Desktop Connection Manager 2.7

047910
CVSS 5.5 - MEDIUM
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
local
low complexity
microsoft

Summary

An information disclosure vulnerability exists in the Remote Desktop Connection Manager (RDCMan) application when it improperly parses XML input containing a reference to an external entity, aka 'Remote Desktop Connection Manager Information Disclosure Vulnerability'.

Vulnerable Configurations

Part Description Count
Application
Microsoft
2

The Hacker News

idTHN:3D9F7E987C17A81C15F0745D108233C7
last seen2020-03-11
modified2020-03-11
published2020-03-11
reporterThe Hacker News
sourcehttps://thehackernews.com/2020/03/microsoft-patch-tuesday-march-2020.html
titleMicrosoft Issues March 2020 Updates to Patch 115 Security Flaws