ProxyToken: Another nail-biter from Microsoft Exchange

🗓️ 31 Aug 2021 13:29:05Reported by Pieter ArntzType

malwarebytes

malwarebytes🔗 blog.malwarebytes.com👁 88 Views

Microsoft Exchange ProxyToken vulnerability affects mailboxes, allowing unauthorized access to email

Reporter	Title	Published	Views	Family All 32
ICS	Iranian Islamic Revolutionary Guard Corps-Affiliated Cyber Actors Exploiting Vulnerabilities for Data Extortion and Disk Encryption for Ransom Operations	14 Sep 202212:00	–	ics
ATTACKERKB	CVE-2021-33766 ProxyToken	14 Jul 202100:00	–	attackerkb
BDU FSTEC	The vulnerability of Microsoft Exchange Server’s mail server, related to deficiencies in authentication procedures, allows attackers to gain unauthorized access to protected information.	1 Sep 202100:00	–	bdu_fstec
GithubExploit	Exploit for CVE-2021-33766	31 Aug 202122:03	–	githubexploit
GithubExploit	Exploit for CVE-2021-33766	31 Aug 202122:03	–	githubexploit
Circl	CVE-2021-33766	13 Apr 202105:00	–	circl
CISA KEV Catalog	Microsoft Exchange Server Information Disclosure	18 Jan 202200:00	–	cisa_kev
CISA	CISA Adds 13 Known Exploited Vulnerabilities to Catalog	18 Jan 202200:00	–	cisa
CNNVD	Microsoft Exchange Server 授权问题漏洞	13 Jul 202100:00	–	cnnvd
Check Point Advisories	Microsoft Exchange Information Disclosure (CVE-2021-33766)	5 Sep 202100:00	–	checkpoint_advisories

31 Aug 2021 13:29Current

7.8High risk

Vulners AI Score7.8

EPSS0.97502

microsoft exchange proxytoken vulnerability unauthorized access mailboxes security