CVE-2018-8448

EPSS 3.2%

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 3.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

10 out 2018Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access (OWA) fails to properly handle web requests, aka "Microsoft Exchange Server Elevation of Privilege Vulnerability." This affects Microsoft Exchange Server.

Produtos afetados

Microsoft · Microsoft Exchange Server

Referências

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8448 http://www.securityfocus.com/bid/105492 http://www.securitytracker.com/id/1041836