SecuritySpace - CVE-2020-16896

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2020-16896

Description:
An information disclosure vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system.

To exploit this vulnerability, an attacker would need to run a specially crafted application against a server which provides Remote Desktop Protocol (RDP) services.

The update addresses the vulnerability by correcting how RDP handles connection requests.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2020-16896
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16896
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16896

CVE ID:	CVE-2020-16896
Description:	An information disclosure vulnerability exists in Remote Desktop Protocol (RDP) when an attacker connects to the target system using RDP and sends specially crafted requests. An attacker who successfully exploited this vulnerability could obtain information to further compromise the user’s system. To exploit this vulnerability, an attacker would need to run a specially crafted application against a server which provides Remote Desktop Protocol (RDP) services. The update addresses the vulnerability by correcting how RDP handles connection requests.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2020-16896 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16896 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16896