← back
CVE-2021-34523

Microsoft Exchange Server Elevation of Privilege Vulnerability

CVSS 9 CRITICALEPSS 100.0%● KEV
In short

A flaw in Microsoft Exchange Server allows an authenticated attacker to gain higher privileges on the system. This is critical because an insider or someone with basic access can escalate their permissions to administrator level.

Technical detail

This vulnerability permits privilege escalation through improper authorization checks in Exchange Server components. An authenticated user can exploit insufficient validation mechanisms to elevate their privileges to administrative level, potentially compromising the entire mail system and sensitive data.

Summary generated and translated by AI from the official description.
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:U/RL:O/RC:C
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →