What is CVE-2021-41373?

CVE-2021-41373 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. FSLogix Information Disclosure Vulnerability

Which CVE IDs does CVE-2021-41373 cover?

CVE-2021-41373 covers the following CVE IDs: CVE-2021-41373. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of CVE-2021-41373?

CVE-2021-41373 has a CVSS v3 base score of 5.5, published by Microsoft Security Response Center (MSRC).

Which products are affected by CVE-2021-41373?

CVE-2021-41373 affects 1 product, including: FSLogix.

CVE-2021-41373HighCVSS 5.5

FSLogix Information Disclosure Vulnerability

Vendor

Microsoft Security Response Center (MSRC)

Published

November 9, 2021

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2021-41373 →

📋 Description

What type of information could be disclosed by this vulnerability? This vulnerability allows disclosing user data redirected to the profile or Office container via FSLogix Cloud cache. This data can include user profile settings and files.

🎯 Affected products1

FSLogix

✅ Remediation

KBRelease Notes (Security Update) — fixed build 2.9.7979.62170

🔗 References (3)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-41373
patchhttps://aka.ms/fxlogix/download
referencehttp://aka.ms/fslogix/whatsnew