Microsoft Skype for Business and Lync CVE-2018-8238 Security Bypass Vulnerability

Bugtraq ID:	104619
Class:	Unknown
CVE:	CVE-2018-8238
Remote:	Yes
Local:	No
Published:	Jul 10 2018 12:00AM
Updated:	Jul 10 2018 12:00AM
Credit:	Steven Thompson
Vulnerable:	Microsoft Skype for Business 2016 (64-bit) 0 Microsoft Skype for Business 2016 (32-bit) 0 Microsoft Lync 2013 (64-bit) SP1 Microsoft Lync 2013 (32-bit) SP1
Not Vulnerable:

Microsoft Skype for Business and Lync CVE-2018-8238 Security Bypass Vulnerability

Microsoft Skype for Business and Lync are prone to a security-bypass vulnerability.

An attacker can leverage this issue to bypass certain security restrictions and perform unauthorized actions.

Microsoft Skype for Business and Lync CVE-2018-8238 Security Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft Skype for Business and Lync CVE-2018-8238 Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Microsoft Skype for Business and Lync CVE-2018-8238 Security Bypass Vulnerability

References:

• Microsoft Windows Homepage (Microsoft )
  
• CVE-2018-8238 | Skype for Business and Lync Security Feature Bypass Vulnerabilit (Microsoft)