Source |
The Hacker News |
Identifiant |
3313600 |
Date de publication |
2021-08-30 20:38:15 (vue: 2021-08-31 04:05:57) |
Titre |
New Microsoft Exchange \'ProxyToken\' Flaw Lets Attackers Reconfigure Mailboxes |
Texte |
Details have emerged about a now-patched security vulnerability impacting Microsoft Exchange Server that could be weaponized by an unauthenticated attacker to modify server configurations, thus leading to the disclosure of Personally Identifiable Information (PII).
The issue, tracked as CVE-2021-33766 (CVSS score: 7.3) and coined "ProxyToken," was discovered by Le Xuan Tuyen, a researcher at the |
Notes |
|
Envoyé |
Oui |
Condensat |
2021 33766 about as cve attacker attackers coined configurations could cvss details disclosure discovered emerged exchange flaw have identifiable impacting information issue leading lets mailboxes microsoft modify new now patched personally pii proxytoken reconfigure researcher score: security server thus tracked tuyen unauthenticated vulnerability weaponized xuan |
Tags |
Vulnerability
Guideline
|
Stories |
|
Move |
|