SB2024021336 - Privilege escalation in Microsoft Exchange Server

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2024021336

SB2024021336 - Privilege escalation in Microsoft Exchange Server

Published: February 13, 2024 Updated: February 15, 2024

Security Bulletin ID SB2024021336
Severity
Critical
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

Critical 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 security vulnerability.


1) Exposure of Resource to Wrong Sphere (CVE-ID: CVE-2024-21410)

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to an error in Microsoft Exchange Server. A remote attacker can target an NTLM client such as Outlook with an NTLM credentials-leaking type vulnerability. The leaked credentials can then be relayed against the Exchange server to gain privileges as the victim client and to perform operations on the Exchange server on the victim's behalf.

Note, the vulnerability is being actively exploited in the wild.


Remediation

Install update from vendor's website.

References