PT-2015-2775 · Microsoft · Exchange Server Cumulative Update 8+2

Publicado 2015-06-09 · Atualizado 2018-10-12 · CVE-2015-1771

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server 2013 SP1 Microsoft Exchange Server Cumulative Update 8

Description The issue is related to a cross-site request forgery (CSRF) vulnerability in the web applications of Microsoft Exchange Server. This vulnerability allows remote attackers to hijack the authentication of arbitrary users. The exploitation of this vulnerability requires the victim to be authenticated to the target site, and it is related to the improper management of user sessions by Exchange.

Recommendations For Microsoft Exchange Server 2013 SP1, update to a version that properly manages user sessions to prevent CSRF attacks. For Microsoft Exchange Server Cumulative Update 8, ensure that user sessions are correctly handled to mitigate the risk of elevation of privilege attacks. As a temporary workaround, consider implementing additional authentication measures to minimize the risk of exploitation.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

BDU:2015-12140

CVE-2015-1771

Produtos afetados

Exchange Server

Exchange Server 2013 Sp1

Exchange Server Cumulative Update 8

Referências · 9

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-064 · Aviso do Fabricante
• http://securityfocus.com/bid/75011 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1771 · Nota
• http://technet.microsoft.com/security/bulletin/ms15-064 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1771 · Nota de Segurança
• http://technet.microsoft.com/security/bulletin/MS15-064 · Nota
• http://securitytracker.com/id/1032528 · Nota
• https://bdu.fstec.ru/vul/2015-12140 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2015-1771 · Nota de Segurança