SQLTeam.com | Weblogs | Forums

Vulnerability CVE-2017-12625 present in sql server 2019 express x64 executable

Security scan on sql_server_2019_express_x64_ENU.exe identified a vulnerability CVE-2017-12625

CVE-2017-12625 description: - Apache Hive 2.1.x before 2.1.2, 2.2.x before 2.2.1, and 2.3.x before 2.3.1 expose an interface through which masking policies can be defined on tables or views, e.g., using Apache Ranger. When a view is created over a given table, the policy enforcement does not happen correctly on the table for masked columns.

Steps to Reproduce: - Run a security scan using security scanning tool.

Is there any patch present for server 2019 express which has a fix for this vulnerability ?
If this is not the forum then please suggest me the right place where i can raise the ticket fot this or where i can get the answer for this.

sql-server-general - Microsoft Q&A