Microsoft SQL Server Analysis Services in Microsoft SQL Server 2012, Microsoft SQL Server 2014, and Microsoft SQL Server 2016 allows an information disclosure vulnerability when it improperly enforces permissions, aka "Microsoft SQL Server Analysis Services Information Disclosure Vulnerability".

The remote Microsoft SQL Server is missing a security update. It is, therefore, affected by an information disclosure vulnerability in Microsoft SQL Server Analysis Services when it improperly enforces permissions. An attacker could exploit the vulnerability if the attacker's credentials allow access to an affected SQL server database. An attacker who successfully exploited the vulnerability could gain additional database and file information.

ID	Name	Product	Family	Type	Severity
122485	KB4036996: Security Update for SQL Server (August 2017) (uncredentialed check)	Nessus	Windows	Remote	high
102271	KB4036996: Security Update for SQL Server (August 2017)	Nessus	Windows : Microsoft Bulletins	Local	high

Detections

Analytics

CVE-2017-8516

high

Tenable Plugins

high

high