CVE-2020-0618

Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability

Sql Server

A remote code execution vulnerability exists in Microsoft SQL Server Reporting Services when it incorrectly handles page requests, aka 'Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability'.

11. Feb 2020

Ausgewertete Quellen

• Microsoft
  https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-0618
• Hinweis
  http://packetstormsecurity.com/files/156707/SQL-Server-Reporting-Services-SSRS-ViewState-Deserialization.html
• Hinweis
  http://packetstormsecurity.com/files/159216/Microsoft-SQL-Server-Reporting-Services-2016-Remote-Code-Execution.html
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2020-0618
• CISA
  Microsoft SQL Server Reporting Services Remote Code Execution Vulnerability
• NVD
  CVE-2020-0618