Forum Discussion

MaheshKS's avatar
MaheshKS
Copper Contributor
Jan 25, 2024

Need help to figure the solution for recent vulnerabilities report in my DB host server.

Dear Experts,   During recent scans, below vulnerability was reported in my Stage database server, this is my current DB version Microsoft SQL Server 2019 (RTM-CU23) (KB5030333) - 15.0.4335.1 (X64)...
EmadAl-Mousa's avatar
EmadAl-Mousa
Copper Contributor
Feb 03, 2024
Hi,

Do you have SQL Server 2008 installed on the same server/machine ?

In windows go to "Control Panel" then to "Programs" then to "Uninstall a Program" ...check your list of installed software...do you SQL Server 2008 installed ?

Another way search in windows for SQL Server Configuration Manager

Regards
Emad

  • MaheshKS's avatar
    MaheshKS
    Copper Contributor
    Feb 06, 2024

    Hi EmadAl-Mousa ,

     

    Thanks for your time and reply.

    Below are list of software's installed on my DB server which pulled using below command for your reference, I can't see any 2008 SQL software installed.

     

    Command - Get-WmiObject -Class Win32_Product | select Name, Version

     

    Name                                               Version
    ---------------------------------------------------
    SQL Server 2019 Distributed Replay 15.0.2000.5
    SQL Server 2019 Data quality client 15.0.2000.5
    Microsoft SQL Server 2019 T-SQL Language Service 15.0.2000.5
    SQL Server 2019 Data quality service 15.0.2000.5
    SQL Server 2019 Client Tools Extensions 15.0.2000.5
    SQL Server 2019 XEvent 15.0.2000.5
    SQL Server 2019 Connection Info 15.0.2000.5
    SQL Server 2019 DMF 15.0.2000.5
    Microsoft OLE DB Driver for SQL Server 18.6.7.0
    SQL Server 2019 Client Tools 15.0.2000.5
    Microsoft SQL Server 2019 Setup (English) 15.0.4345.5
    SQL Server 2019 SQL Data Quality Common 15.0.2000.5
    Microsoft VSS Writer for SQL Server 2019 15.0.2000.5
    SQL Server 2019 Client Tools Extensions 15.0.2000.5
    SQL Server 2019 Data quality client 15.0.2000.5
    SQL Server 2019 Connection Info 15.0.2000.5
    SQL Server 2019 Client Tools 15.0.2000.5
    Microsoft ODBC Driver 17 for SQL Server 17.10.5.1
    SQL Server 2019 Integration Services Worker Agent 15.0.2000.5
    SQL Server 2019 Database Engine Shared 15.0.2000.5
    Browser for SQL Server 2019 15.0.2000.5
    Microsoft SQL Server 2012 Native Client 11.4.7462.6
    SQL Server 2019 DMF 15.0.2000.5
    SQL Server 2019 Shared Management Objects Extensions 15.0.2000.5
    SQL Server 2019 SQL Diagnostics 15.0.2000.5
    SQL Server Management Studio for Analysis Services 15.0.18338.0
    SQL Server 2019 Master Data Services 15.0.4345.5
    SQL Server 2019 Shared Management Objects 15.0.2000.5
    SQL Server 2019 Common Files 15.0.2000.5
    SQL Server 2019 SQL Polybase 15.0.2000.5
    SQL Server 2019 Distributed Replay 15.0.2000.5
    SQL Server Management Studio 15.0.18338.0
    SQL Server 2019 Shared Management Objects Extensions 15.0.2000.5
    SQL Server 2019 Master Data Services 15.0.4345.5
    SQL Server 2019 Batch Parser 15.0.2000.5
    SQL Server 2019 Integration Services Master Service 15.0.2000.5
    Microsoft SQL Server 2019 RsFx Driver 15.0.4345.5
    SQL Server 2019 Shared Management Objects 15.0.2000.5
    SQL Server 2019 Full text search 15.0.2000.5
    SQL Server 2019 Data quality service 15.0.2000.5
    SQL Server 2019 Database Engine Services 15.0.2000.5
    SQL Server 2019 Integration Services 15.0.2000.5
    SQL Server 2019 Database Engine Shared 15.0.2000.5
    SQL Server 2019 Integration Services 15.0.2000.5
    SQL Server 2019 Common Files 15.0.2000.5
    SQL Server 2019 Integration Services Worker Agent 15.0.2000.5
    SQL Server 2019 XEvent 15.0.2000.5
    SQL Server 2019 Database Engine Services 15.0.2000.5
    SQL Server 2019 Distributed Replay 15.0.2000.5
    SQL Server 2019 Distributed Replay 15.0.2000.5
    SQL Server 2019 Integration Services Master Service 15.0.2000.5
    SQL Server Management Studio for Reporting Services 15.0.18338.0
    SQL Server Management Studio 15.0.18338.0

     

    Mahesh

    • Javier_Villegas's avatar
      Javier_Villegas
      MVP
      Feb 06, 2024
      I see you have SQL Server Management Studio 15 installed. and SSRS 15.
      you should consider uninstalling SSMS 15 and install the latest 19 aka.ms/SSMS
      Also download the latest SSRS for version 15 and upgrade the one you have

      Regards
      Javier
      • MaheshKS's avatar
        MaheshKS
        Copper Contributor
        Feb 07, 2024

        Hi Javier_Villegas,

         

        Thanks for your reply and time.

         

        If version is the cause of the problem, We have two DB nodes in Production Node1 and Node2, where are the Scan team is saying vulnerability is with Node1 server not from node2 server.

         

        We have recently moved to Cloud from On Prem, the same software were used in On-prem servers and we haven't got this type of vulnerability before.

         

        Mahesh 

Resources