Lucene search
+L

Microsoft Exchange server 2013 and newer are vulnerable to NTLM relay attacks

🗓️ 28 Jan 2019 00:00:00Reported by Dirk-jan MollemaType 
cert
 cert
🔗 www.kb.cert.org👁 266 Views

Microsoft Exchange 2013 and newer vulnerable to NTLM relay attacks. EWS PushSubscriptionRequest function allows remote attackers to gain privileges. Update or disable EWS subscriptions to mitigate

Related
Refs
ReporterTitlePublishedViews
Family
avleonov
Information Security Automation
Vulnerability Management at Tinkoff Fintech School
4 Mar 201910:38
–avleonov
bdu_fstec
BDU FSTEC
Microsoft Exchange Server Access Control Privilege Escalation
6 Mar 201900:00
–bdu_fstec
bdu_fstec
BDU FSTEC
Microsoft Exchange Server Access Control File Rights Alteration
6 Mar 201900:00
–bdu_fstec
circl
Circl
CVE-2019-0686
13 Feb 201914:35
–circl
circl
Circl
CVE-2019-0724
18 Oct 201911:36
–circl
checkpoint_advisories
Check Point Advisories
Microsoft Exchange Privilege Escalation (CVE-2019-0724)
30 Dec 201900:00
–checkpoint_advisories
cve
CVE
CVE-2019-0686
6 Mar 201900:00
–cve
cve
CVE
CVE-2019-0724
6 Mar 201900:00
–cve
cvelist
Cvelist
CVE-2019-0686
6 Mar 201900:00
–cvelist
cvelist
Cvelist
CVE-2019-0724
6 Mar 201900:00
–cvelist
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

21 Jun 2019 20:21Current
8.2High risk
Vulners AI Score8.2
CVSS 29.3
CVSS 37.4
CVSS 3.18.1
EPSS0.23799
266