title: SCOM Information Disclosure Vulnerability
description: SCOM Information Disclosure Vulnerability
problem types: Information Disclosure
affected:
{
vendor: Microsoft
product: System Center 2016 Operations Manager
cpes: cpe:2.3:a:microsoft:system_center_operations_manager:2016:-:*:*:*:*:*:*
platforms: Unknown
versions:
version: 7.2.0.0, lessThan: 7.2.12335.0, versionType: custom, status: affected
}
{
vendor: Microsoft
product: System Center 2019 Operations Manager
cpes: cpe:2.3:a:microsoft:system_center_operations_manager:2019:-:*:*:*:*:*:*
platforms: Unknown
versions:
version: 10.0.0.0, lessThan: 10.19.10550.0, versionType: custom, status: affected
}
{
vendor: Microsoft
product: System Center 2012 R2 Operations Manager
cpes: cpe:2.3:a:microsoft:system_center_operations_manager:2012:r2:*:*:*:*:*:*
platforms: Unknown
versions:
version: 7.1.0.0, lessThan: 7.1.10226.1413, versionType: custom, status: affected
}
metrics:
format: CVSS
scenarios: GENERAL
cvssV3_1: [
version: 3.1
baseSeverity: HIGH
baseScore: 7.5
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:U/RL:O/RC:C
]