← Volver a CVEs

CVE-2018-0924

N/A

Descripcion

Microsoft Exchange Server 2010 Service Pack 3 Update Rollup 20, Microsoft Exchange Server 2013 Cumulative Update 18, Microsoft Exchange Server 2013 Cumulative Update 19, Microsoft Exchange Server 2013 Service Pack 1, Microsoft Exchange Server 2016 Cumulative Update 7, and Microsoft Exchange Server 2016 Cumulative Update 8 allow an information disclosure vulnerability due to how URL redirects are handled, aka "Microsoft Exchange Information Disclosure Vulnerability". This CVE is unique from CVE-2018-0941.

Detalles CVE

Puntuacion CVSS v3.1N/A

Publicado3/14/2018

Ultima modificacion11/21/2024

Fuentenvd

Avistamientos honeypot0

Productos afectados

microsoft:exchange_server

Debilidades (CWE)

CWE-601

Referencias

http://www.securityfocus.com/bid/103320(secure@microsoft.com)

http://www.securitytracker.com/id/1040521(secure@microsoft.com)

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0924(secure@microsoft.com)

http://www.securityfocus.com/bid/103320(af854a3a-2127-422b-91ae-364da2661108)

http://www.securitytracker.com/id/1040521(af854a3a-2127-422b-91ae-364da2661108)

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0924(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.