A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka Microsoft Exchange Spoofing Vulnerability. This affects Microsoft Exchange Server.
Weakness
This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Exchange_server | Microsoft | 2016-cumulative_update_8 (including) | 2016-cumulative_update_8 (including) |
| Exchange_server | Microsoft | 2016-cumulative_update_9 (including) | 2016-cumulative_update_9 (including) |
Related Attack Patterns
- https://cwe.mitre.org/data/definitions/21.html
- https://cwe.mitre.org/data/definitions/22.html
- https://cwe.mitre.org/data/definitions/459.html
- https://cwe.mitre.org/data/definitions/461.html
- https://cwe.mitre.org/data/definitions/473.html
- https://cwe.mitre.org/data/definitions/476.html
- https://cwe.mitre.org/data/definitions/59.html
- https://cwe.mitre.org/data/definitions/60.html
- https://cwe.mitre.org/data/definitions/667.html
- https://cwe.mitre.org/data/definitions/94.html
References
- http://www.securityfocus.com/bid/104045
- http://www.securitytracker.com/id/1040850
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8153
- http://www.securityfocus.com/bid/104045
- http://www.securitytracker.com/id/1040850
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8153