New Microsoft Exchange 'ProxyToken' Flaw Lets Attackers Reconfigure Mailboxes
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-33766 | Unauthenticated Information Disclosure (ProxyToken) in Microsoft Exchange Server | 7.3 | 98% | KEV | KEV |
From the original article
2 min read at thehackernews.com
Details have emerged about a now-patched security vulnerability impacting Microsoft Exchange Server that could be weaponized by an unauthenticated attacker to modify server configurations, thus leading to the disclosure of Personally Identifiable Information (PII). The issue, tracked as CVE-2021-33766 (CVSS score: 7.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.