Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5rg4-jqjp-6664

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.2

Описание

A remote code execution vulnerability exists in Microsoft Exchange server due to improper validation of cmdlet arguments.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the System user, aka 'Microsoft Exchange Server Remote Code Execution Vulnerability'.

A remote code execution vulnerability exists in Microsoft Exchange server due to improper validation of cmdlet arguments.An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the System user, aka 'Microsoft Exchange Server Remote Code Execution Vulnerability'.

EPSS

Процентиль: 99%
0.84693
Высокий

7.2 High

CVSS3

Дефекты

CWE-269
CWE-74
CWE-94

Связанные уязвимости

CVSS3: 8.4
nvd
больше 5 лет назад

<p>A remote code execution vulnerability exists in Microsoft Exchange server due to improper validation of cmdlet arguments.</p> <p>An attacker who successfully exploited the vulnerability could run arbitrary code in the context of the System user. Exploitation of the vulnerability requires an authenticated user in a certain Exchange role to be compromised.</p> <p>The security update addresses the vulnerability by correcting how Microsoft Exchange handles cmdlet arguments.</p>

CVSS3: 8.4
msrc
больше 5 лет назад

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS3: 7.2
fstec
больше 5 лет назад

Уязвимость почтового сервера Microsoft Exchange Server, связанная с ошибками обработки объектов в памяти, позволяющая нарушителю выполнить произвольный код

CVSS3: 7.8
msrc
почти 5 лет назад

Microsoft Exchange Server Remote Code Execution Vulnerability

CVSS3: 7.8
msrc
почти 5 лет назад

Microsoft Exchange Server Remote Code Execution Vulnerability

EPSS

Процентиль: 99%
0.84693
Высокий

7.2 High

CVSS3

Дефекты

CWE-269
CWE-74
CWE-94