CVE-2019-1373: Microsoft Exchange Server 2019

Описание

Оригинално описание

A remote code execution vulnerability exists in Microsoft Exchange through the deserialization of metadata via PowerShell, aka 'Microsoft Exchange Remote Code Execution Vulnerability'.

Засегнати продукти

• Microsoft Microsoft Exchange Server 2019: Cumulative Update 2
• Microsoft Microsoft Exchange Server 2016: Cumulative Update 13
• Microsoft Microsoft Exchange Server 2013: Cumulative Update 23
• Microsoft Microsoft Exchange Server 2019 Cumulative Update 3: unspecified
• Microsoft Microsoft Exchange Server 2016 Cumulative Update 14: unspecified

История

Други уязвимости в Microsoft Microsoft Exchange Server 2019

• 7.8CVE-2021-27065
• 7.8CVE-2021-26858
• 7.8CVE-2021-26857
• 9.1CVE-2021-26855
• 5.4CVE-2020-0903

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2019-1373
• https://nvd.nist.gov/vuln/detail/CVE-2019-1373
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-1373