VDB

BDU%3A2021-04285

BDU%3A2021-04285 PUBLISHED CVSS 7.300000190734863 HIGH

Уязвимость почтового сервера Microsoft Exchange Server, связанная с недостатками процедуры аутентификации, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

Risk Scores

CVSS 3.1
7.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:U/RL:O/RC:C

Affected Products

VendorProductVersions
MicrosoftMicrosoft Exchange Server 2016 Cumulative Update 1915.01.0
MicrosoftMicrosoft Exchange Server 2013 Cumulative Update 2315.00.0
Microsoft CorpMicrosoft Exchange Server
MicrosoftMicrosoft Exchange Server 2019 Cumulative Update 815.02.0
MicrosoftMicrosoft Exchange Server 2016 Cumulative Update 2015.01.0
MicrosoftMicrosoft Exchange Server 2019 Cumulative Update 915.02.0

Timeline

  • Apr 13, 2021 PoC Published
  • Sep 1, 2021 CVE Published
  • Sep 23, 2021 PoC Published
  • Jun 14, 2023 PoC Published
  • Oct 21, 2023 PoC Published
  • Dec 11, 2023 PoC Published
  • Mar 1, 2024 PoC Published
  • Apr 5, 2024 PoC Published
  • Jul 14, 2024 PoC Published
  • Jul 17, 2024 PoC Published
  • Sep 24, 2024 CVE Updated
  • Oct 8, 2024 PoC Published

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›