PT-2020-2484
CVE-2020-1173
·
Published
2020-05-12
·
Updated
2020-05-27
Description by
CVSS 2.0
4.9
MediumMetricsAV:N/AC:M/Au:S/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Microsoft Power BI Report Server (affected versions not specified)
Description
The issue is related to errors in the representation of information by the user interface. It allows a remote attacker to conduct spoofing attacks. The vulnerability exists in the way Microsoft Power BI Report Server validates the content-type of uploaded attachments.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾