PT-2019-2726 · Microsoft · Exchange Server

Pham Van Khanh · Published 2019-07-09 · Updated 2020-08-24 · CVE-2019-1136

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server (affected versions not specified)

Description The issue is related to an elevation of privilege vulnerability in Microsoft Exchange Server, which is associated with insufficient access restrictions. This could allow a remote attacker to exploit the vulnerability and gain elevated privileges, potentially giving them the same rights as other users of the Exchange server. As a result, the attacker may be able to access the mailboxes of other users and perform other activities.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2019-02662

CVE-2019-1136

Affected Products

Exchange Server

References · 4

• https://osv.dev/vulnerability/CVE-2019-1136 · Vendor Advisory
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1136 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-02662 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-1136 · Security Note