-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

===========================================================================
                         AUSCERT Security Bulletin

                               ASB-2020.0060
Microsoft Patch Tuesday (March 2020): Remote Desktop Connection Manager 2.7
                               11 March 2020

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:              Remote Desktop Connection Manager 2.7
Operating System:     Windows
Impact/Access:        Read-only Data Access -- Remote with User Interaction
Resolution:           Patch/Upgrade
CVE Names:            CVE-2020-0765  
Member content until: Friday, April 10 2020

OVERVIEW

        Microsoft has released its monthly security patch update for the month of March 2020.
        
        This update resolves 1 vulnerabilities across the following products: [1]
        
         Remote Desktop Connection Manager 2.7


IMPACT

        Microsoft has given the following details regarding these vulnerabilities.
        
         Details         Impact                   Severity
         CVE-2020-0765   Information Disclosure   Moderate


MITIGATION

        Microsoft recommends updating the software with the version made available on the Microsoft Update Catalogue for the following Knowledge Base articles. [1]


REFERENCES

        [1] Microsoft Security Update Guidance
            https://portal.msrc.microsoft.com/en-us/security-guidance

AusCERT has made every effort to ensure that the information contained
in this document is accurate.  However, the decision to use the information
described is the responsibility of each user or organisation. The decision to
follow or act on information or advice contained in this security bulletin is
the responsibility of each user or organisation, and should be considered in
accordance with your organisation's site policies and procedures. AusCERT
takes no responsibility for consequences which may arise from following or
acting on information or advice contained in this security bulletin.

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours 
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967
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=cxbJ
-----END PGP SIGNATURE-----