SQL Data Discovery & Classification, a tool within Microsoft’s SQL Server 2019, could inform attackers which data within a database is labeled sensitive, and which isn’t, researchers report. Imperva security research engineer Avidan Reich emphasizes this tool does not grant attackers access to sensitive data, nor is this finding a vulnerability in SQL Server 2019.

Read full article on Dark Reading