CVE Vulnerabilities

CVE-2018-8153

Authentication Bypass by Spoofing

Published: May 09, 2018 | Modified: Aug 24, 2020
CVSS 3.x
5.4
MEDIUM
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
CVSS 2.x
5.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu

A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka Microsoft Exchange Spoofing Vulnerability. This affects Microsoft Exchange Server.

Weakness

This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

Affected Software

Name Vendor Start Version End Version
Exchange_server Microsoft 2016-cumulative_update_8 (including) 2016-cumulative_update_8 (including)
Exchange_server Microsoft 2016-cumulative_update_9 (including) 2016-cumulative_update_9 (including)

References