CVE-2020-1018

An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when…

published April 15, 2020

CVSS
—
EPSS
6%
Percentile
93.6
In the wild
Unconfirmed
What it is

An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when showing the records as a chart page.The attacker who successfully exploited the vulnerability could see the information that are in a masked field.The security update addresses the vulnerability by updating the rendering engine the Windows client to properly detect masked fields and render the content as masked., aka 'Microsoft Dynamics Business Central/NAV Information Disclosure'.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.06311 · 93.6th percentile
Published
2020-04-15T15:13Z
EPSS history
Timeline
  • 15 APR 15:13Z
    An information disclosure vulnerability exists when Microsoft Dynamics Business Central/NAV on-premise does not properly hide the value of a masked field when…
    cvelistv5