{"id":"CVE-2019-1376","aliases":["EUVD-2019-9933","GHSA-624c-cxwr-xj6q"],"status":"published","title":"An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS)...","description":"An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when it improperly enforces permissions, aka 'SQL Server Management Studio Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1313.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.05381,"percentile":0.92716,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-755"],"published":"2019-10-10T13:28:42Z","modified":"2026-06-17T02:28:29Z","products":[{"vendor":"microsoft","product":"sql server management studio"},{"vendor":"microsoft","product":"sql_server_management_studio"}],"references":[{"url":"https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1376","tags":["x_refsource_MISC","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-1376"},{"url":"https://github.com/advisories/GHSA-624c-cxwr-xj6q"}],"sources":{"cve":[{"id":"CVE-2019-1376","description":"An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when it improperly enforces permissions, aka 'SQL Server Management Studio Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1313.","status":"published","published":"2019-10-10T13:28:42Z","modified":"2024-08-04T18:13:30.502Z","updated_at":"2026-11-02T14:20:25.661187Z"}],"euvd":[{"id":"EUVD-2019-9933","description":"An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when it improperly enforces permissions, aka 'SQL Server Management Studio Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1313.","status":"published","published":"2019-10-10T13:28:42Z","modified":"2024-08-04T18:13:30Z","updated_at":"2026-11-03T03:06:58.233851Z"}],"ghsa":[{"id":"GHSA-624c-cxwr-xj6q","title":"An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS)...","description":"An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when it improperly enforces permissions, aka 'SQL Server Management Studio Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1313.","status":"published","published":"2022-05-24T22:00:57Z","modified":"2023-01-30T05:04:53Z","updated_at":"2026-11-02T14:47:09.187677Z"}],"nvd":[{"id":"CVE-2019-1376","description":"An information disclosure vulnerability exists in Microsoft SQL Server Management Studio (SSMS) when it improperly enforces permissions, aka 'SQL Server Management Studio Information Disclosure Vulnerability'. This CVE ID is unique from CVE-2019-1313.","status":"published","published":"2019-10-10T14:15:18.83Z","modified":"2026-06-17T02:28:29.42Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-755"],"updated_at":"2026-11-02T14:05:31.019577Z"}]}}