Veille CVE
CVE-2018-8581
7.4 Élevée Exploitée activement Utilisée par des rançongicielsCatalogue CISA KEV — Microsoft Exchange Server Privilege Escalation Vulnerability
Ajoutée le 03/03/2022 · Échéance de correction (agences US) : 17/03/2022
Action requise : Apply updates per vendor instructions.
Description
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server.
Produits concernés
Scores CVSS
| Version | Score | Source | Vecteur |
|---|---|---|---|
| 3.1 | 7.4 Élevée | nvd@nist.gov (NVD) | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N |
| 3.1 | 7.4 Élevée | 134c704f-9b21-4f2e-91b3-4a467353bcc0 | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N |
| 2.0 | 5.8 Moyenne | nvd@nist.gov (NVD) | AV:N/AC:M/Au:N/C:P/I:P/A:N |
Références
- http://www.securityfocus.com/bid/105837 Broken LinkThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1042141 Broken LinkThird Party AdvisoryVDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8581 PatchVendor Advisory
- http://www.securityfocus.com/bid/105837 Broken LinkThird Party AdvisoryVDB Entry
- http://www.securitytracker.com/id/1042141 Broken LinkThird Party AdvisoryVDB Entry
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8581 PatchVendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-8581 US Government Resource