What is CVE-2021-26859?

CVE-2021-26859 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. Microsoft Power BI Information Disclosure Vulnerability

Which CVE IDs does CVE-2021-26859 cover?

CVE-2021-26859 covers the following CVE IDs: CVE-2021-26859. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2021-26859?

CVE-2021-26859 has a CVSS v3 base score of 7.7, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2021-26859?

CVE-2021-26859 affects 2 products, including: Power BI Report Server version 15.0.1103.234; Power BI Report Server version 15.0.1104.300.

CVE-2021-26859HighCVSS 7.7

Microsoft Power BI Information Disclosure Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

March 9, 2021

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2021-26859 →

📋 Description

What type of information could be disclosed by this vulnerability? Exploiting this vulnerability could allow the disclosure of NTLM hashes.

🎯 Affected products2

Power BI Report Server version 15.0.1103.234
Power BI Report Server version 15.0.1104.300

✅ Remediation

KB5001284 (Security Update) — fixed build 1.8.7485.35104 KB5001285 (Security Update) — fixed build 1.9.7675.15620

🔗 References (5)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26859
patchhttps://www.microsoft.com/downloads/details.aspx?familyid=56722
referencehttps://support.microsoft.com/help/5001284
patchhttps://www.microsoft.com/en-us/download/details.aspx?id=57270
referencehttps://support.microsoft.com/help/5001285