Lucene search

K
githubexploit2D0AC1C7-F656-5D6B-9FC2-79525014BE1E
HistorySep 04, 2021 - 3:34 p.m.

Exploit for Unrestricted Upload of File with Dangerous Type in Microsoft

2021-09-0415:34:03
258
unrestricted upload file
microsoft exchange
proxyshell
proof of concept
active directory
legacydn
sid
load-balanced
security updates
prior research
academic research

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

8.5

Confidence

High

EPSS

0.973

Percentile

99.9%

ProxyShell

Proof of Concept Exploit for Microsoft Exchange CVE…

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

8.5

Confidence

High

EPSS

0.973

Percentile

99.9%