PT-2019-2726 · Microsoft · Exchange Server

Pham Van Khanh · Publicado 2019-07-09 · Atualizado 2020-08-24 · CVE-2019-1136

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server (affected versions not specified)

Description The issue is related to an elevation of privilege vulnerability in Microsoft Exchange Server, which is associated with insufficient access restrictions. This could allow a remote attacker to exploit the vulnerability and gain elevated privileges, potentially giving them the same rights as other users of the Exchange server. As a result, the attacker may be able to access the mailboxes of other users and perform other activities.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

BDU:2019-02662

CVE-2019-1136

Produtos afetados

Exchange Server

Referências · 4

• https://osv.dev/vulnerability/CVE-2019-1136 · Aviso do Fabricante
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1136 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-02662 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2019-1136 · Nota de Segurança