CVE-2018-8153

EPSS 1.12%
Published 09.05.2018 19:29:02
Last modified 21.11.2024 04:13:21
Source secure@microsoft.com
Teams watchlist Login
Open Login

A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka "Microsoft Exchange Spoofing Vulnerability." This affects Microsoft Exchange Server.

Affected products Warnungen 0 Metrics 3 CWE 1 References 6

Data is provided by the National Vulnerability Database (NVD)

Microsoft ≫ Exchange Server Version2016 Updatecumulative_update_8

Microsoft ≫ Exchange Server Version2016 Updatecumulative_update_9

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	1.12%	0.775

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.4	2.8	2.5	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
nvd@nist.gov	5.8	8.6	4.9	AV:N/AC:M/Au:N/C:P/I:P/A:N

CWE-290 Authentication Bypass by Spoofing

This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

http://www.securitytracker.com/id/1040850

Third Party Advisory

VDB Entry

http://www.securityfocus.com/bid/104045

Third Party Advisory

VDB Entry

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8153

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2018-8153

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-8153

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-8153

EUVD