CVE-2020-1343

  1. Yack CVE
  2. Vulnerabilities (CVE)
  3. CVE-2020-1343

5.9 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

A

n information disclosure vulnerability exists in Visual Studio Code Live Share Extension when it exposes tokens in plain text, aka 'Visual Studio Code Live Share Information Disclosure Vulnerability'.

References
Link Resource
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1343 Patch Vendor Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1343 Patch Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:microsoft:visual_studio_live_share:-:*:*:*:*:*:*:*
History

21 Nov 2024, 05:10

Type Values Removed Values Added
References () https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1343 - Patch, Vendor Advisory () https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-1343 - Patch, Vendor Advisory
Information

Published : 2020-06-09 20:15

Updated : 2024-11-21 05:10

NVD link : CVE-2020-1343

Mitre link : CVE-2020-1343

CVE.ORG link : CVE-2020-1343

JSON object : View

Products Affected

microsoft

CWE
CWE-319

Cleartext Transmission of Sensitive Information