PT-2018-9163 · Microsoft · Exchange Server 2016+2

Cameron Vincent · Publicado 2018-03-13 · Atualizado 2020-08-24 · CVE-2018-0941

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Microsoft Exchange Server 2016 versions Cumulative Update 7 through Cumulative Update 8

Description: An information disclosure issue exists due to how data is imported. This could allow an attacker to discover sensitive information that should otherwise not be disclosed, particularly if the impacted user is using Microsoft Exchange Outlook Web Access (OWA).

Recommendations: For Microsoft Exchange Server 2016 Cumulative Update 7, update to a version that fixes the information disclosure vulnerability. For Microsoft Exchange Server 2016 Cumulative Update 8, update to a version that fixes the information disclosure vulnerability.

Correção

Identificadores relacionados

CVE-2018-0941

Produtos afetados

Exchange Server

Exchange Outlook Web Access

Exchange Server 2016

Referências · 5

• http://securityfocus.com/bid/103318 · Nota
• https://osv.dev/vulnerability/CVE-2018-0941 · Aviso do Fabricante
• http://securitytracker.com/id/1040521 · Nota
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0941 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-0941 · Nota de Segurança